718304b6f53d86f27125a553a86e169b77cbffe3dfab1c8d8a9ba84a1ed24159 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

718304b6f53d86f27125a553a86e169b77cbffe3dfab1c8d8a9ba84a1ed24159
Size

95KB
MD5

185b1ed9b58c968d26dac49bff2586a2
SHA1

8be0723bc231c691800c7c3f0bbc26d9f5c52d7e
SHA256

718304b6f53d86f27125a553a86e169b77cbffe3dfab1c8d8a9ba84a1ed24159
SHA512

a0fbfc3358a3391dd222b1997bd098a49755f06bdda2514f5686a5a4e3383cbe59d757577dbfb0437c8c6cbd3fc4ab9ec58ba37a9f833dd835ba163a2a79e9c6
SSDEEP

1536:72bFBH6UCR56/QPvoaxuRIEZ0u+QSiBlEf7ZWlHxMvLvRLDvpmlu/ChIFi+weQ0u:72BBa3R56/PaxukpiBlEfmxMDv5D0s/D

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

718304b6f53d86f27125a553a86e169b77cbffe3dfab1c8d8a9ba84a1ed24159
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ