b6010aaa8482525d26b5df031b4061b12ec528197b99f23aae4d5c085e1e5b4c | Triage

Sharing

General

Target

b6010aaa8482525d26b5df031b4061b12ec528197b99f23aae4d5c085e1e5b4c
Size

1.9MB
MD5

f5c0c342b795ab8192d6e99c8453dfef
SHA1

ebfeac259fcbc1b29104556bb67ca6ed23700476
SHA256

b6010aaa8482525d26b5df031b4061b12ec528197b99f23aae4d5c085e1e5b4c
SHA512

7541eead9180bf49f4823d31691e1d35ce2fd1c653a93b837d055aff66e88ae113437c0923f1cff748128a2b3b93688e3b8be09918391a3ede316df959fada15
SSDEEP

24576:khx6huTVkCjmzNccCyxNG/l6rMb745Qxinukr9ZaNMtpuMmlEGC6OCu5D0DDmNLX:kTnmTzNHNG/30tTtsM+1OCu5DEDmNLeG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b6010aaa8482525d26b5df031b4061b12ec528197b99f23aae4d5c085e1e5b4c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 724KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ