596d29b8563a1382954a5f845fe17e324b940e5a02d2f3d4c3d9782b8561d0a2 | Triage

Sharing

General

Target

596d29b8563a1382954a5f845fe17e324b940e5a02d2f3d4c3d9782b8561d0a2
Size

1.7MB
MD5

4067b8f337c4b4e2f859894e2d353a6e
SHA1

bb5f53cdf274ebb0c38dd6fa6ec53c6731dfffde
SHA256

596d29b8563a1382954a5f845fe17e324b940e5a02d2f3d4c3d9782b8561d0a2
SHA512

5444291420309b8a65d14b6f434f92acee8c038b55898b2a0c5383b5b26a88d6e377c05e6079c7b74fb84bd237889cc56bd98c0ceb44698a38f974a875d458b6
SSDEEP

49152:tTu0LSVHASxN9aD7sOP93ZPaZRNsa95ZN5T:ty0mVgSxa872av9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

596d29b8563a1382954a5f845fe17e324b940e5a02d2f3d4c3d9782b8561d0a2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ