d66269a531210990d18fbae6657d45b81248c52b7defbe52a24ac792099eb94e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d66269a531210990d18fbae6657d45b81248c52b7defbe52a24ac792099eb94e
Size

1.2MB
MD5

4019daab7022c877871981e4566d0db4
SHA1

1a2a40af3cad3c8addb662d9479f15838c3d0901
SHA256

d66269a531210990d18fbae6657d45b81248c52b7defbe52a24ac792099eb94e
SHA512

7240392694ddf390fd82a143657c9fcb013aa3d5762d528937efc2f61025e9c796763e96f1e80142b005cbc86d61f45cfa05a65d489409d00ab52da8c30e0159
SSDEEP

24576:EftuUa8ULUfUy8ojfHzYqlBm8coEFsbe04ucW2LLRHo1xm7f0Wib8UQiD+O7jQ0Y:EFuh1zkHujObe1ucbLVkxu5DO7jQ0YG+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d66269a531210990d18fbae6657d45b81248c52b7defbe52a24ac792099eb94e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 944KB - Virtual size: 942KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ