7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad | Triage

Sharing

General

Target

7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad
Size

206KB
MD5

81a202644aac74aae4a6499628de6960
SHA1

3007aee0083a2a8e6361070903c2182c236c0a7f
SHA256

7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad
SHA512

f13183a8e5de2d990572ff654793dee7eeef71490304bb2b45d014a547413a5f3def7e5a2d075dd03ea68ac464cba7869d6c9dc52a846055777ea31cc5e65562
SSDEEP

3072:T8FuCO2outY/SI03ms6KPBEOU+hhjQRuSyseGCH:4ECJoSfV2spC+Djm9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7b6cce389fe2822fc6edffcdbe337f78b0e2541a24dba37ff904297d9e8199ad
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 204KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I�+9�uE
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE