22e21614703ca233b256707d63eed9ee8e6cd7dcb35d3e595bd32d46d0f9987b | Triage

Sharing

General

Target

22e21614703ca233b256707d63eed9ee8e6cd7dcb35d3e595bd32d46d0f9987b
Size

484KB
MD5

8495d75e28330f5a56f779e94471c6c4
SHA1

fe8da4272a5561eda1f2a3932a1e1d45ba5e3400
SHA256

22e21614703ca233b256707d63eed9ee8e6cd7dcb35d3e595bd32d46d0f9987b
SHA512

5c5fde848092b9e195e1917e4e256b06b58dad3f0ace2979b598b39e2f9861d61b367b7f54db09937710adac005399d0c943249199a9dfa899f3abebca910c88
SSDEEP

6144:7h1bAufh2y1oSgxRz+p/BBV91jzB9ek229DoXmbJ+31ggUgDRT5UPvbR1DnAA7iD:jlh5K3+p/B11XWz29cXG+31ghhtN36

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

22e21614703ca233b256707d63eed9ee8e6cd7dcb35d3e595bd32d46d0f9987b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 352KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 812KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ