4d4b7ce6e8bf743e14980df3afe5a0f131af60d89ad8a791ef2b9c98b59cdf18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d4b7ce6e8bf743e14980df3afe5a0f131af60d89ad8a791ef2b9c98b59cdf18
Size

467KB
MD5

0e669e27537541e4429695375974de04
SHA1

8ca7ad737cd13d38d600018a03789acb5eb115fb
SHA256

4d4b7ce6e8bf743e14980df3afe5a0f131af60d89ad8a791ef2b9c98b59cdf18
SHA512

ae8e767255c5b7e28efed1fbc23a7069c170b00a1718fe4c0d3fbf4dccb79607bc72502a8f1aafecadbf57a2db1c68bd81cc93908e98dfd89bf1192215f63ff4
SSDEEP

12288:ERglySvMgU3/Dd2FSxDgn/j4A3hi/a/1m4x1T:ERgQStU8HLs/a/1bF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4d4b7ce6e8bf743e14980df3afe5a0f131af60d89ad8a791ef2b9c98b59cdf18
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 520KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ