60c15028bc59f37ca4786627a26c3c907ed2e0a2c8287ed60bc1779fb6b8a891 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60c15028bc59f37ca4786627a26c3c907ed2e0a2c8287ed60bc1779fb6b8a891
Size

153KB
MD5

07ea73aeea103ee89312490e4a9a7c19
SHA1

364d0cd2f61d92e6286d96410461065c103f01a3
SHA256

60c15028bc59f37ca4786627a26c3c907ed2e0a2c8287ed60bc1779fb6b8a891
SHA512

6d3494fd4c064573b50772b410632fd8e3dc52855b3bc3d4bfc587ad6fc7cc898b74368e2216d7d3f1b49a7a2db1b14348b6c909b970fafbae3833a69fb9066b
SSDEEP

3072:uDT8OGrXeUpBXSAj5o0Erpu6u4mjwNPOVuqD/RC5TKBSWq:GsrnpBDFoA6Zm0NGVuq8

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

60c15028bc59f37ca4786627a26c3c907ed2e0a2c8287ed60bc1779fb6b8a891
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 367B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ