d2ed553ba4dd060eae0b1426d81f5110c1da74a7722271d8cd6443a1dff18829 | Triage

Sharing

General

Target

d2ed553ba4dd060eae0b1426d81f5110c1da74a7722271d8cd6443a1dff18829
Size

80KB
MD5

84294632e958c6102da58dc71b9b0a2e
SHA1

1387a9b4cba5d2994d9730c2bb8491f36eac237f
SHA256

d2ed553ba4dd060eae0b1426d81f5110c1da74a7722271d8cd6443a1dff18829
SHA512

9af9e525267ec3c5cbec1cf398d824e4da8519559b610ff0538a49ca8ef369ef5542eb0e786f67b69a654247a4a885c916bb4c276b61fc79eb4eeafe42201cae
SSDEEP

1536:t4xwP1ZBOMgynfgnfMUsxvcarsu5KigD7KdbTi+J6FX/XlQGstH0:tkaZBA8AkUsRQD72bTi+iXlQNtH0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d2ed553ba4dd060eae0b1426d81f5110c1da74a7722271d8cd6443a1dff18829
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ