f1bcb32b4337dc17662d77b760fbcd6cf0901e9468447f12cc5fb96e72916c09 | Triage

Sharing

General

Target

f1bcb32b4337dc17662d77b760fbcd6cf0901e9468447f12cc5fb96e72916c09
Size

31KB
MD5

07ca24947909f904b9a9a1bba739e64c
SHA1

4fe70103da43ac3e21afb6d21985262fca798d59
SHA256

f1bcb32b4337dc17662d77b760fbcd6cf0901e9468447f12cc5fb96e72916c09
SHA512

0adf82585cfb0c655eb1f75de7504d509b97afaa0cb9b8ec5d936a785f1361e1b00bb0928381c2a4050c51d132d51db059134ca410b557dfce46bd5a341d1d2e
SSDEEP

768:YxQ+8u4bohpyUK06PMkv9NKRMkc2zwz4skh3GBEmi8:WL8cy5hMSKRk2z3sls

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f1bcb32b4337dc17662d77b760fbcd6cf0901e9468447f12cc5fb96e72916c09
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ