6b82120d42bc0cc185ae568c0b9bab528aab01b48a4377f66af430751ca0e0bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b82120d42bc0cc185ae568c0b9bab528aab01b48a4377f66af430751ca0e0bc
Size

362KB
MD5

01350f3e4533cd17f1404a65246b5c46
SHA1

8c02bca91c46c9282586fa0e9134f41072517b74
SHA256

6b82120d42bc0cc185ae568c0b9bab528aab01b48a4377f66af430751ca0e0bc
SHA512

35c6af4b0b254e5af81e11cdde692ab359e35a79644d91d05342e4ee139839488a4acf266d1038a24b5b2636f7b2376d9fe336622596f6d5663933e2eff389a3
SSDEEP

6144:ToGjxAQ3dopeuui7bo3wVc5rd1kVh0zkzzMw2oXb00yZnU9j2K5M8b:TVOZeSWwGr7ksozzMQXb0dJgja8b

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6b82120d42bc0cc185ae568c0b9bab528aab01b48a4377f66af430751ca0e0bc
.exe windows x86

647b2d25b4821905b4195ff7a6455b54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

UPX0
Size: 512B - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE