120ef1fbc21852da39554a0d97312c568630ec39858918f027921a45100e152f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

120ef1fbc21852da39554a0d97312c568630ec39858918f027921a45100e152f
Size

11.3MB
MD5

77fa77508ab993ae308e4e554a9c7fe3
SHA1

c1c3aa60470c07b7bc1ecfd5184d1febfa239e51
SHA256

120ef1fbc21852da39554a0d97312c568630ec39858918f027921a45100e152f
SHA512

8e2d0b5df4b5c1c1d44a4d398db66c18122d2586ffd8bc2bffad3ad3a41c1f1533902434b0e918a8b26428f8ef44d453fc1218e34b9fa7a87f4e6b1388128e75
SSDEEP

196608:adgdP/GIte/V5JQFvkLbqoC7Gh2y+a8iwb84uNzJJwCZEMI9noqm1PGyu5vr8Ayt:xGEg56vkVCiz+2wfgJJhZEvaqm1PIp10

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

120ef1fbc21852da39554a0d97312c568630ec39858918f027921a45100e152f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ