bd6f60a4945bee0ff7e999ab4fc950fec53f9de6b5ea061c6c976d795b9f1cfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd6f60a4945bee0ff7e999ab4fc950fec53f9de6b5ea061c6c976d795b9f1cfd
Size

52KB
MD5

0a378b0e9330f291ded7bd14f292e15a
SHA1

a361f8e545b80845e24d2f61df63fbb55b28ced5
SHA256

bd6f60a4945bee0ff7e999ab4fc950fec53f9de6b5ea061c6c976d795b9f1cfd
SHA512

b80a9f02d68f0d4c844f4a4b8ae602ad4da43986fc2ec231a1ef3181bcf056f6e8d275483d791f31478f2a13a738ccb831370a0b108b7a82a586278383df5265
SSDEEP

768:2jaghaO0DUXDX7mp7UPpYdfSaOrl1C90xaNlZlqJS3jKPAb7FoLyT1:a/TX7JSaaO51K0xEzKYfFoLyT1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bd6f60a4945bee0ff7e999ab4fc950fec53f9de6b5ea061c6c976d795b9f1cfd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ