05b23f8e679efa3e8a5b7012772c21c421c13d1d1f3d1fff3a84f1f0deb7dedf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05b23f8e679efa3e8a5b7012772c21c421c13d1d1f3d1fff3a84f1f0deb7dedf
Size

5KB
MD5

09dbe344cff06b65678ec3a069c7e370
SHA1

327f9f2b3be1a77648a7f41951857434fbd856cf
SHA256

05b23f8e679efa3e8a5b7012772c21c421c13d1d1f3d1fff3a84f1f0deb7dedf
SHA512

d1581b311215f5122439607d2bc860c0f800337caaa5d4c0220394f7aaa4158966802e78cbb974e32eed0b6011958c35b0774eda0e3e9852766193b83f1bce4e
SSDEEP

96:Gvl10GxW2FjJYPmVI+tTpMbCJBnXgFq3cx1U0zqukU:Gvl10GPdYPmVI+tTpXXXcEukU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

05b23f8e679efa3e8a5b7012772c21c421c13d1d1f3d1fff3a84f1f0deb7dedf
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE