b878a9d6d0fa113591dd35fecf4f38336fceb46cbfb6d78ef04277ec1a4e706e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b878a9d6d0fa113591dd35fecf4f38336fceb46cbfb6d78ef04277ec1a4e706e
Size

56KB
MD5

932d1ab880241cfb7743d4a77263fc20
SHA1

1ef789cd3c6e6d62a8419a35741b9dc1a8afeb7b
SHA256

b878a9d6d0fa113591dd35fecf4f38336fceb46cbfb6d78ef04277ec1a4e706e
SHA512

617f315fe879d5a8ff0f9947af13c998347b6ddefd4f233f862ec30f76ac079a532bc42f10b37f6bbb4c2b2d0970b3610433b16c6957b908825f817a36efd4e5
SSDEEP

768:OibI7Pzq6/aav3dSeyapUfiMU/1Ty3VwHZwGeDHyt+YhKKN4wpPj4/kgiPC35PVR:pbIbGzId5yHJ7GuHg+WN4wpPj44ySFg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b878a9d6d0fa113591dd35fecf4f38336fceb46cbfb6d78ef04277ec1a4e706e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE