975bda0041e65aca2ee70c67a851280949329b5e9b9e78efb63a9afc9feec036 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

975bda0041e65aca2ee70c67a851280949329b5e9b9e78efb63a9afc9feec036
Size

62KB
MD5

01a4a563e5beb97b5dae97bc6cf9959d
SHA1

73554a83d2a70c6edabaec85d47d830d13455c9c
SHA256

975bda0041e65aca2ee70c67a851280949329b5e9b9e78efb63a9afc9feec036
SHA512

bd94e3accd3f0ea9f4cdee8d2cf3bc4b6c600c896fde2c9401fbc6261b1cf11bea985c49d38e0441cf688b36d4a01f66553560f668783ab48a813fdee338d862
SSDEEP

1536:4KeQcyJLAVhK3NQkkfWSItS/iWm7bh4XW8:4K0yVAa6kc04/9ubeT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

975bda0041e65aca2ee70c67a851280949329b5e9b9e78efb63a9afc9feec036
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ