059c6a2952c05596f6bbecda1d4136b08aff36da312f3e3ee447463e84f3137b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

059c6a2952c05596f6bbecda1d4136b08aff36da312f3e3ee447463e84f3137b
Size

49KB
MD5

037d9fde716daa4b8e9b2ba10a707bbe
SHA1

4593b5cd2413bcdbec73fded39ea6265fb5d0a09
SHA256

059c6a2952c05596f6bbecda1d4136b08aff36da312f3e3ee447463e84f3137b
SHA512

bb35e159aa42e0030e043dd7420182e9dc648819c870907c47e19890db9b5444ea561079b6cb83c5ab894db6eb8f4ce85bcc8b0d96fc0203b6ab5ba98e35644a
SSDEEP

768:2jyyVo94dHcC3k0oqurMa1HyCbE5f/d0gEeiRQPmF/klurP6qTWvk6D7nX8:zyy9+v3k8WMa1/EsgCRfFrPPAfnX8

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

059c6a2952c05596f6bbecda1d4136b08aff36da312f3e3ee447463e84f3137b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE