bda7491ddbe461a02d1530ee3bb83afad5776803a3b3ff7a1b3c6d92cdbb5e99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bda7491ddbe461a02d1530ee3bb83afad5776803a3b3ff7a1b3c6d92cdbb5e99
Size

319KB
MD5

53851f35bbafda98f8f48da72f688f30
SHA1

1589845445d6a1d42e28a8c068d11b55018f32dd
SHA256

bda7491ddbe461a02d1530ee3bb83afad5776803a3b3ff7a1b3c6d92cdbb5e99
SHA512

1dd62c6868155f5d56bed8b62d829d86cdd9c150b769e7fbbe017740eb8cab041b7a4ca976e81cb3e9caa6d5fdc965387116f990c93fcb829c77addf1d5e7ec5
SSDEEP

3072:lqqgPrBQ9AqCWjHm+O3qtC0NectEqqgPrBQ9AqCWjHm+O3qtC0NectPGIU:/gT2EWjH7C01tugT2EWjH7C01tOIU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bda7491ddbe461a02d1530ee3bb83afad5776803a3b3ff7a1b3c6d92cdbb5e99
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE