f450d4f567361ce1cf5590d1e98593b3a7cb361b4e3d64f2e64321d726585fca | Triage

Sharing

General

Target

f450d4f567361ce1cf5590d1e98593b3a7cb361b4e3d64f2e64321d726585fca
Size

85KB
MD5

23117b49a7df75b145d5bfd10debfd6f
SHA1

3abb0455c454e4a14297dd52f4c0b1586aade702
SHA256

f450d4f567361ce1cf5590d1e98593b3a7cb361b4e3d64f2e64321d726585fca
SHA512

d16c9684842369a194e7e6ad2186ae52f7c907da6e69825a0085707ef74fde8bd9deaa7c7e069bd4c88a1a56b26474897cbfa2856408f62eede27e06c988bc1a
SSDEEP

1536:etcRD0FuXLU6Tta3WIaOx3U+fl942u6CWjOpzYGmrRDDKVs2eelfHO9uzIXCCAgY:tRD0ULU6Tta3WIjaed5SVYBFDDKC2eeL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f450d4f567361ce1cf5590d1e98593b3a7cb361b4e3d64f2e64321d726585fca
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE