599f16fdab666673cbf4dba9387b476cea86fd195f64def20ed5d2cfc184922b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

599f16fdab666673cbf4dba9387b476cea86fd195f64def20ed5d2cfc184922b
Size

1.0MB
MD5

22b18c2b36f291927f20cf2b3a94e611
SHA1

bbd180d88b70f806ab3f9e7d92ca1e71fcd75b2e
SHA256

599f16fdab666673cbf4dba9387b476cea86fd195f64def20ed5d2cfc184922b
SHA512

8c998517d2cd84c57e2c15ac059702aca11a204ba2c18e1f4f69ccbf89dcd3f05894ac7ab00aabbb8002d9ab8ea49b906b6acd0267e3ab0bc4ec1a5ee8769100
SSDEEP

24576:55ZeZWv1py9T9vAT44iscCu43mUsPv7ksrIxvTNR:jn1pyT9VXZ43mUArIR/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

599f16fdab666673cbf4dba9387b476cea86fd195f64def20ed5d2cfc184922b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 924KB - Virtual size: 928KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3UPX1
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE