1deddbaef686cc60cbc79a7a0dd9874f561d99ad83b37e31d94f310ec9b4dedb | Triage

Sharing

General

Target

1deddbaef686cc60cbc79a7a0dd9874f561d99ad83b37e31d94f310ec9b4dedb
Size

393KB
MD5

da605da227b1932e425f517b260ecde9
SHA1

a244ad57c77f17cfa1b46850b9bb11ae3f8ea27d
SHA256

1deddbaef686cc60cbc79a7a0dd9874f561d99ad83b37e31d94f310ec9b4dedb
SHA512

616481f85087c358eea66bc1eed8dc0057979232f113d7c81b3c5c685b9214c617e92783e0800fbb9354311b260796d0a9fda6f3dc0252074dd81d4e75a900d8
SSDEEP

12288:6ch3R47vKhK3grS8gdAqyRK1OWvQ8KpnO5s82OCM:j1R+vzX8g1vOV80ms+CM

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1deddbaef686cc60cbc79a7a0dd9874f561d99ad83b37e31d94f310ec9b4dedb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ