564d8b6be02e3d76a805e8f61263460119485f1c862d7335a1e38a4ba2390f74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

564d8b6be02e3d76a805e8f61263460119485f1c862d7335a1e38a4ba2390f74
Size

745KB
MD5

1aad479ad6a23d660786f7bbaf84e759
SHA1

07460dee723812286360dac841936cf3747c55a2
SHA256

564d8b6be02e3d76a805e8f61263460119485f1c862d7335a1e38a4ba2390f74
SHA512

014c7556dc57ddc413b2404f706d8c3212c5debecbd114ff4a59dcc4c4a2286392673bd58cbfe5aa13fe20fca6893b236a9d88116b8954109c349c9b14649743
SSDEEP

12288:oFAoSM88z4yBU/3qO5yx1rGrAt5OCHjgC0D:r8fBa+KTGjmD

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

564d8b6be02e3d76a805e8f61263460119485f1c862d7335a1e38a4ba2390f74
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE