bec10173e868b4b0110e47d1c975127b6aa4ffe54a6bd7b71026df35cd77dd78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bec10173e868b4b0110e47d1c975127b6aa4ffe54a6bd7b71026df35cd77dd78
Size

94KB
MD5

81fb7f8897647149bbbe7a77e4ef3e5a
SHA1

769b07a564fa613f7130ca9c2582291741b72ece
SHA256

bec10173e868b4b0110e47d1c975127b6aa4ffe54a6bd7b71026df35cd77dd78
SHA512

5a7013b4cfb60a608b2205d5cda8f66b58f94def97aa21b3aca95df1791b5b5d2a6551d1ee46b493239b45665fc3d5b7007b5758ff54e7ab8ee0350799a5cc1a
SSDEEP

1536:K4z0Yea6Whof0/Y/xl0l0gXLp3G45bScsWY6OmZ2X4WyYM9+Fdayp/Xze4xluEfj:K4oaNSs/Y/xS0ow4UGY6klyY9n9hXiWc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bec10173e868b4b0110e47d1c975127b6aa4ffe54a6bd7b71026df35cd77dd78
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ