565c618df80a28bb0b1d470de5f638e369841ede7e466beda7896c17d7c99ea4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

565c618df80a28bb0b1d470de5f638e369841ede7e466beda7896c17d7c99ea4
Size

110KB
MD5

0ea3c6797d606654b384165a63c519c6
SHA1

947f820fa6383e0d31425dc1aa2acefec435c09c
SHA256

565c618df80a28bb0b1d470de5f638e369841ede7e466beda7896c17d7c99ea4
SHA512

355e211948b2100a5be502bb4b335dad74cfef047daeb0d87508f9c03f75273ab15644debde61fbc527118645053a4bfcb746eecc8b05640f8cdda04b39d95e2
SSDEEP

3072:CDDg9WsNPwF3/G03L9kNVgAVPPc63VbZSHHii56:IcTPwF+03pkNSCMKhgHF6

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

565c618df80a28bb0b1d470de5f638e369841ede7e466beda7896c17d7c99ea4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ