18f15baddf1fe6c38f86c07e47855c749862aa5b1bae353816d719bdb83d80d6 | Triage

Sharing

General

Target

18f15baddf1fe6c38f86c07e47855c749862aa5b1bae353816d719bdb83d80d6
Size

625KB
MD5

1bcea5acfc792217d5155ef690f40446
SHA1

4f2f7d5b345a0cd01caa86dd7a574da586f86680
SHA256

18f15baddf1fe6c38f86c07e47855c749862aa5b1bae353816d719bdb83d80d6
SHA512

73a0bedc4448e122a90897b91631e3cea6f0fe730965ec142692f1efa283e59242ad2c52b7bb2355913ba60d593ceb5d479f308382ec58b6514dfef0cd7128c8
SSDEEP

12288:qE6NYLtwAevaTapQJIOb4XMqtvgLk0Ms5z67vvFhEByr1HNsx9CRw6:q9NY6vFuJbvX67vUm+xl

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

18f15baddf1fe6c38f86c07e47855c749862aa5b1bae353816d719bdb83d80d6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 7.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ