73e179a61b89bb8cfa3a08c936e4f271dffd1320ae903e9b22279c5a1657710f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73e179a61b89bb8cfa3a08c936e4f271dffd1320ae903e9b22279c5a1657710f
Size

192KB
MD5

3f8ad0d56698fd5b21412943144b48a3
SHA1

d32502417ee2ac2a1cf0cf5800edf337878c285a
SHA256

73e179a61b89bb8cfa3a08c936e4f271dffd1320ae903e9b22279c5a1657710f
SHA512

2485ea5743f1059d2af5c50a77d0ae6e95798a3c7cf002663496502f770c439b10e1747a31c092c591dfc6c5b2883c2924976c26ce5e0ced3c694ea43f6de9d8
SSDEEP

3072:lLciGq+B0BTYxxQTYpwAG62wp36w+sILd2eXA2zo:lcKCxQkpwxwO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

73e179a61b89bb8cfa3a08c936e4f271dffd1320ae903e9b22279c5a1657710f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ