17f087c3701309290672a68782a5560ba7fe192e7c0e3b85184f68a1d1e16274 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f087c3701309290672a68782a5560ba7fe192e7c0e3b85184f68a1d1e16274
Size

148KB
MD5

3b5b65384c60e3a3a104f03beda62880
SHA1

53d24e4e86143fb067c622870af215e630efc108
SHA256

17f087c3701309290672a68782a5560ba7fe192e7c0e3b85184f68a1d1e16274
SHA512

107323626dc54c67384d0aff08dcfcbf399267324c7c202c4634bd069085379a31f2658b66c05d0b2122cff9bcab70ae4a2b3576f00e6d3a279d49a9b16e306f
SSDEEP

3072:DGYofVqiulPzxpjfLpZv99QaI62gKocbqPmoDCo1k:DGBfxsLj9eaIMKTbquoDF6

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

17f087c3701309290672a68782a5560ba7fe192e7c0e3b85184f68a1d1e16274
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ