16b2f481523540871648a229e7e8d1152f0ef5a51bb05d57ded4fb549aca7f9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16b2f481523540871648a229e7e8d1152f0ef5a51bb05d57ded4fb549aca7f9e
Size

125KB
MD5

131c6cab0dab1fb56f32ecfd9ae14010
SHA1

23c2aa0a9b12a73f83710376c7c1eecfe69dd1f4
SHA256

16b2f481523540871648a229e7e8d1152f0ef5a51bb05d57ded4fb549aca7f9e
SHA512

6e871d6bd6f46583d242abb411c57b3df809b9a425bd9bf3479bc18de0185bb6f1cfce35890e67ddfd5f52c5b7e4d5f32749f856fa1c6b6dc48c534847ea2a0e
SSDEEP

3072:RROzoTq0+RO7IwnzcPsY+Bdc811LRsfawwD5jZ1sgk:fkdNwBwkVsCwobS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

16b2f481523540871648a229e7e8d1152f0ef5a51bb05d57ded4fb549aca7f9e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ