1698a72873af4b6bd5abea2d5ff81386f2f1e743a6582017aa9dd793d7eeaa26 | Triage

Sharing

General

Target

1698a72873af4b6bd5abea2d5ff81386f2f1e743a6582017aa9dd793d7eeaa26
Size

1.3MB
MD5

dee1f759547b5519f090b04eac6dce84
SHA1

9112703b4262c5874ee178b196f0eeb019be152e
SHA256

1698a72873af4b6bd5abea2d5ff81386f2f1e743a6582017aa9dd793d7eeaa26
SHA512

3160210450a0482ec63ca8e51617dedf6619497b9b56fcba3c00e4f2c6e576b85d3121fb0d836ac81eaa2e42872c4e37cdd850dd554367f994e1fe27d0500dac
SSDEEP

24576:gUSFbLojqLXkfucNu6irhCb6h0hVvnQ6ESfYvgtOCL55Zb7TH+u6lp+H:gUS2jqSuZrFIdfptOa577TeuW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1698a72873af4b6bd5abea2d5ff81386f2f1e743a6582017aa9dd793d7eeaa26
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ