a60be19777b788bfe55e575c0e6756079266662c35597e909fae589df7a88abd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a60be19777b788bfe55e575c0e6756079266662c35597e909fae589df7a88abd
Size

8KB
MD5

3044e42cef2b5a0cd7d159223d0ebba0
SHA1

901d7d40bbbfccd9b6413af34c2bff862a19157d
SHA256

a60be19777b788bfe55e575c0e6756079266662c35597e909fae589df7a88abd
SHA512

559d71c84072b361443a4f9d4895a46b8fe3cc4cad835aabea22a5c2dcddaa4168d912e58c89ea6af4015290ebd22f42b0db28fb3e7df612ae096b99790c091f
SSDEEP

96:eUJCvBdZ5zfm7QLvhimkdFt4k1jpPROgCG/lIbWhTDs10WHRF2Ren:XCJdchmShZCG/lIOWHRF2Ren

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a60be19777b788bfe55e575c0e6756079266662c35597e909fae589df7a88abd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ