6f613e0db06dd64ac8ac5c4b08a3ace8b261f8da9b46cd74ad4c07ca473be70a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f613e0db06dd64ac8ac5c4b08a3ace8b261f8da9b46cd74ad4c07ca473be70a
Size

4.7MB
MD5

1486fce8662ae4f80f9411111f94c908
SHA1

089fbaf70fd98bcdfe70b03e1784ec877cdb3af6
SHA256

6f613e0db06dd64ac8ac5c4b08a3ace8b261f8da9b46cd74ad4c07ca473be70a
SHA512

0ce0901f6a502206543015b547891599a6a6c8de1320f0d1b4e007351db92ca227ec8c5d137a77c5b78b1954e3ad1c5b10c36e76bd2ee4ba0ab567f001f65131
SSDEEP

98304:ehz0UYv//RA6qwD0BvXiaj3/CRnhT4bC1yICXchc0RyEt/oKt:euUM/RbqwAvDPXG1yrXOgKt

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6f613e0db06dd64ac8ac5c4b08a3ace8b261f8da9b46cd74ad4c07ca473be70a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE