b7cb0d37f8eaa65104d99d5e9c507cf1d431a076cec5592ad9121dd22e8925ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7cb0d37f8eaa65104d99d5e9c507cf1d431a076cec5592ad9121dd22e8925ce
Size

29KB
MD5

450548d8ada28a47be3695afe3c46a70
SHA1

c194f302eef8f4a4d2e4a3615ccc8bdcacddfbfb
SHA256

b7cb0d37f8eaa65104d99d5e9c507cf1d431a076cec5592ad9121dd22e8925ce
SHA512

fbc275c26167c160020c0c61c0b21f850a327221b463fa377c9211ed2fdd67b341d69594428561f0cd62e226bb1ea636eb9971c858a96aecf6c8f1226ca96970
SSDEEP

768:fGM+RyrKqX7cj/1S78G7y6E1Ld7+Vc8UA:V+RolKMv7xE1xyVc8H

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b7cb0d37f8eaa65104d99d5e9c507cf1d431a076cec5592ad9121dd22e8925ce
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ