99c16f26b1671f1dd8f66d2b7401651c47b74cd73849c55a0607e3a8adf22335 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99c16f26b1671f1dd8f66d2b7401651c47b74cd73849c55a0607e3a8adf22335
Size

611KB
MD5

8254a4fcd6225f61cf342d46e1b4b570
SHA1

0828bd7ab981fb4f5b0bac2ad01c541e3065160d
SHA256

99c16f26b1671f1dd8f66d2b7401651c47b74cd73849c55a0607e3a8adf22335
SHA512

f0b3025e8367cda706f603cd20348663de9ab80c4989256034e6ce566f45fb00ff94be256b9e5ce1a36ccbc512a39d599acb3b1cc1b84d4984b3a66dc60392b0
SSDEEP

12288:Sb05KoNLk1Qyx7Dxk5JGMfMrUuBoDgLpTrvZqlvblSBe:Sbx91QQ71k5J9sUuoDCdrvZqZblSI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

99c16f26b1671f1dd8f66d2b7401651c47b74cd73849c55a0607e3a8adf22335
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 888KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 608KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ