2d2b24acc23953f93efd564385edbb4d5e4a787b02690781db587abae469d86b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d2b24acc23953f93efd564385edbb4d5e4a787b02690781db587abae469d86b
Size

1.2MB
MD5

c24eb82c9e6a72a1c7de89aa8cdbaa95
SHA1

3991487488d1b3711c7ad88c9ff1dc35aa403155
SHA256

2d2b24acc23953f93efd564385edbb4d5e4a787b02690781db587abae469d86b
SHA512

af5697f3d947831e25f71ed61054f1b5ae1187ba2b416f64254014fd7757f45d3ed7493040a131b9a58c4eb8fc34714d152d20e6d26a8e6cb0a84502088192f9
SSDEEP

6144:5uHOU/UOPSe570Szp3bE2EorG1VVE+I5E2EJuHOc/UOPSe570Szp3bE2EorG1VVy:gOjOB0vkuVwO7OB0vkuVwO7OB0nut

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2d2b24acc23953f93efd564385edbb4d5e4a787b02690781db587abae469d86b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ