26537266d6b3831721a78616afead2705aa55079d3e0de568e30c4c1b415afe2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26537266d6b3831721a78616afead2705aa55079d3e0de568e30c4c1b415afe2
Size

68KB
MD5

84c0487a42d8faa6a51215645f050880
SHA1

fd446387afbf756e10f8973b51dfaa4458b74ab3
SHA256

26537266d6b3831721a78616afead2705aa55079d3e0de568e30c4c1b415afe2
SHA512

d71bd8971e89ba6f62e8a26f53fddf20e9e26212c1910ccc455f76ff0f4e69040cd8e18e2985944e9bf31fc30b9405532ce7a606441be2f922ca57cbe8f50385
SSDEEP

1536:odrzxT1YKjplHraHT/QvFxLattbDiTLIs3VWYpBNxUyO:oVRNlHrISLattbeTss3TpBzO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

26537266d6b3831721a78616afead2705aa55079d3e0de568e30c4c1b415afe2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE