540bb80a92f53b50064cb16fc0f0c957b2d4795ec152f964a4b3b5eeb0887429 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

540bb80a92f53b50064cb16fc0f0c957b2d4795ec152f964a4b3b5eeb0887429
Size

33KB
MD5

09bba38403bbb918484de4d29042ad80
SHA1

856a50e97e8135ecb90f9e9fc29dc8dd54965c3e
SHA256

540bb80a92f53b50064cb16fc0f0c957b2d4795ec152f964a4b3b5eeb0887429
SHA512

fde56df7ef68fb741739dbfe095d8403f619b4420fc4b9bedd3381946fe1c86cd3f8c4b81589a3d26b33b650ea299ef441f658ccda8ed4e319581ed590adedde
SSDEEP

768:SCIqdH/k1ZVcT194jp4TUUs8b6lN8co9TYplElo:SNqaLV8a6Tvb6Up9T4Elo

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

540bb80a92f53b50064cb16fc0f0c957b2d4795ec152f964a4b3b5eeb0887429
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ