bc67092d5456b28b1e51411f243dae3578aa0cb63f43394d5915c2a9bdd6d148 | Triage

Sharing

General

Target

bc67092d5456b28b1e51411f243dae3578aa0cb63f43394d5915c2a9bdd6d148
Size

206KB
MD5

08072b8d63fc6bf017cd89e0f8eef580
SHA1

3fcc99c0bf168887305e1ec6890b192a53283f5f
SHA256

bc67092d5456b28b1e51411f243dae3578aa0cb63f43394d5915c2a9bdd6d148
SHA512

521631e6f229c6da229ef6e1af05e05eaa767253bc754b15800494b21b070f99957d932d63eb70eba7f53a0472ac6b5c792cada25350a20dfbb1c394994de79f
SSDEEP

3072:T8FuCO2outY/SI03ms6KPBEOU+hhjQRuSys+GCH:4ECJoSfV2spC+Djm5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bc67092d5456b28b1e51411f243dae3578aa0cb63f43394d5915c2a9bdd6d148
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 204KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I�+9�uE
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE