67fca91afd8f78ebee9cc8aaeecb3cee5e8930b717a48e4a57b440eaf668e1ee | Triage

Sharing

General

Target

67fca91afd8f78ebee9cc8aaeecb3cee5e8930b717a48e4a57b440eaf668e1ee
Size

19KB
MD5

090497ef42114f121ed4b20bb1b6e9a0
SHA1

7bd70833ff0348824ee4f230da22d642d8615f70
SHA256

67fca91afd8f78ebee9cc8aaeecb3cee5e8930b717a48e4a57b440eaf668e1ee
SHA512

5f385e18868212db1fd5f4a6e6a92fe1b68617d24b4f25e9a8ec1c62b731b86c5cf8b0ba447658a40e947d59130d4044efcd9b5f8615e164dad5bfac5b929f59
SSDEEP

384:YAvO2AcWAFL43823Dfhl5V+vhxg6QvsWzjgCaJMkeqN:YAvdAcW8xSas6wgCaJWq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

67fca91afd8f78ebee9cc8aaeecb3cee5e8930b717a48e4a57b440eaf668e1ee
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ