18205f42cb86dd6e727d883d540cde245080faa4d66bdbccdcd31333d44d10f5 | Triage

Sharing

General

Target

18205f42cb86dd6e727d883d540cde245080faa4d66bdbccdcd31333d44d10f5
Size

417KB
MD5

0ff3e28d3247a7d6315c064c59479040
SHA1

88a2579420b039a1b03f9afe3d2606e23a93a3d8
SHA256

18205f42cb86dd6e727d883d540cde245080faa4d66bdbccdcd31333d44d10f5
SHA512

97b1b3a3df0906fe306397b9619d2d04c3cdb3168a38686c3f1af03187d48847b6b8e5a702aa19275e7ac8a3cd53ede096dc1f8d7ad06db3d9eb2a7c7ef43f4f
SSDEEP

6144:VfQyeOqZGNA2Cb+QES1q/WAdgRDVPVYjrnNMU51tvnZuwvn3RbEljHSvFLfqO1WG:FAOqIA2ZYmWenNN51hP2HSvFLfr1WG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

18205f42cb86dd6e727d883d540cde245080faa4d66bdbccdcd31333d44d10f5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1020KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 402KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 848KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ