1fd44b60091ae715b17130aa2c0b87a9585028b03284f334cd046bab1d581867 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fd44b60091ae715b17130aa2c0b87a9585028b03284f334cd046bab1d581867
Size

82KB
MD5

0cd0f3cc67c9f569723815a8f4240b11
SHA1

5bad273c1db6ac35ec25a2e34cc91b20353f3150
SHA256

1fd44b60091ae715b17130aa2c0b87a9585028b03284f334cd046bab1d581867
SHA512

2515a0b7c1de5b67b718ad250cb00ac7a91487d0017aeb7c4bd8f8af23408697ee375b56f342ddb1bc732cde93579068393a93f5e7f41c97975a18e8aa4d7153
SSDEEP

768:51CM3qdSkPQrI1kvltiSXsn/ZS+b5GALN6dMIQrKtduXBA3HaMDK4sDK5jKGEkwj:5kaqYmQcmlL8n/bGyrKcK3eGzWrS3I

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1fd44b60091ae715b17130aa2c0b87a9585028b03284f334cd046bab1d581867
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

000159
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ