f00c170526a33d42037dcbd1109c71d309577da7294fbf222f3b38b9b7b12308 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f00c170526a33d42037dcbd1109c71d309577da7294fbf222f3b38b9b7b12308
Size

14.6MB
MD5

d04333ff06098eed5f411ab030915c9f
SHA1

70250083e92934311fb03865e12b9c0fecc0251a
SHA256

f00c170526a33d42037dcbd1109c71d309577da7294fbf222f3b38b9b7b12308
SHA512

52c595bf07820a7a00ae2176416ff282399d8fce3f06c1ffcc7608e5ecf956af8dbe69cf1a63e226b3ecd0230bcdbedaf517d2e8a9faa35c1d1acea743f3016d
SSDEEP

393216:rW9DoNp7R7Vc6X/H4ZLFgUAfXZ3rZAROwCYCx:i9DoNp78ku8Z3rdwCYe

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f00c170526a33d42037dcbd1109c71d309577da7294fbf222f3b38b9b7b12308
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ