678bd0a63347ad5e1cc07639580cf891c32ec30c114eeabb301b3d6ab6c36315 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

678bd0a63347ad5e1cc07639580cf891c32ec30c114eeabb301b3d6ab6c36315
Size

922KB
MD5

0e5830b81d89f2923f6987427dc8eb2a
SHA1

8ac9d2bc28f0cd6b842ed190496f7d436636feeb
SHA256

678bd0a63347ad5e1cc07639580cf891c32ec30c114eeabb301b3d6ab6c36315
SHA512

d7abed0821608249f914b2b2852a51e62bae5285fbacb88b86903bba8c435e7d44d3d51da0a0a91768f6148ac38d023195f193af868a4abe9a7b0d5da1676e1b
SSDEEP

6144:9HLCVO8DoBuIZJ5iD0jsY7tBU84rK4QtvmeHKSFPPPPPPPPPPPPPPPJ:AM5BuI75iQjswz4r1yqW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

678bd0a63347ad5e1cc07639580cf891c32ec30c114eeabb301b3d6ab6c36315
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 348KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 193KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RUPX1
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE