57b6ab7b56264e25cd97747acd881e4780d4cf8f42e1120c90c23e63700d3851 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57b6ab7b56264e25cd97747acd881e4780d4cf8f42e1120c90c23e63700d3851
Size

359KB
MD5

0969ff3e48dad4c24996604aa0a537ef
SHA1

ab74af4dd0031aaee95179c94ffaa95306250152
SHA256

57b6ab7b56264e25cd97747acd881e4780d4cf8f42e1120c90c23e63700d3851
SHA512

2e52f43d4938cb03f9d92c84422ae51da22115b8e319441ea70f4a9281cfda1e96a57ff9018fb9e8e9de9f3a007a433e28c71d8073b0caac5fd86f5b4de1e0e0
SSDEEP

6144:qOvQAOItHQVMYPTUz4kfJgjwPOFWORnrDwwYXWWxMKbdZ9Rr7rZY6nUYN0KDUFi:RvQktHQCwUKApYgwYXXXr/7rZY6UgTDQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

57b6ab7b56264e25cd97747acd881e4780d4cf8f42e1120c90c23e63700d3851
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 808KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 716KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ