b5b1c8c05ae266c5a07190b4f05868e3882bc41c50e24faee88a08d129d8e2ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5b1c8c05ae266c5a07190b4f05868e3882bc41c50e24faee88a08d129d8e2ce
Size

14KB
MD5

00dcf6cb3b59c5bfb5c60f1d303b2da8
SHA1

9143e191da18616c3c58166900a667c81ae66ccb
SHA256

b5b1c8c05ae266c5a07190b4f05868e3882bc41c50e24faee88a08d129d8e2ce
SHA512

132cb21eb4f0bfcd7a95d4769eb06098d698736fa991235ddfe4e38f4da82094683596ba3ea4669fe1e39696f8c611c7ec832c46b0c6e52ef7d01c9c09a14217
SSDEEP

192:nzM/No7mQMH9LI+4HjxYlhR4hd6mzaagKD2um/Z/5BhC4MAzw:nr7mHynFYqhdmKD2VHFi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b5b1c8c05ae266c5a07190b4f05868e3882bc41c50e24faee88a08d129d8e2ce
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ