b9edd6c7b83db1d764431dc07e616611f52d5c7991f66fe8f05825f5af3d84e3 | Triage

Sharing

General

Target

b9edd6c7b83db1d764431dc07e616611f52d5c7991f66fe8f05825f5af3d84e3
Size

302KB
MD5

6e860869ca4dcc7ab83e1e699f85a7cf
SHA1

e57497cd9bfd9498db4a42073ae6c9c4f0c3ca85
SHA256

b9edd6c7b83db1d764431dc07e616611f52d5c7991f66fe8f05825f5af3d84e3
SHA512

edea4dc007e5672cf1f0868f39cd3f2036da6e8492f6a5b56837bc522dbcc038754a1596664bb206235cc058edf27c444f12de3b545656f6fca714685b1b4fd6
SSDEEP

6144:5uHOyrG1VVE+IR/UOPSe570Szp3irG1VVE+IA:gOWuJOB0Jut

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b9edd6c7b83db1d764431dc07e616611f52d5c7991f66fe8f05825f5af3d84e3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ