2fe6f96f60f830806d07d79a8b5e106118ad210a41e9950870c2b3543e282df8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe6f96f60f830806d07d79a8b5e106118ad210a41e9950870c2b3543e282df8
Size

96KB
MD5

7996696c9add7907fe826728e3515838
SHA1

de56a0c7d0d610931722a9634398a427ecdfea2f
SHA256

2fe6f96f60f830806d07d79a8b5e106118ad210a41e9950870c2b3543e282df8
SHA512

49edb5f47a4f28df6847826a9db4321792d5744a2c4ac575ac9d21d2021ca8afc85548272a84bd2622ffd9f157184624a3bddcd012c52f7e4e8878d8c5b9d92d
SSDEEP

1536:Bt2EmBdDp3i6FwTbjca5tPT/y/OYhvSM6n8OOrDmV/+i4+7pPoWpR+GJoaGiGFru:+EUpM4wTbjrt7/v+OvLdowR+wxGzhd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2fe6f96f60f830806d07d79a8b5e106118ad210a41e9950870c2b3543e282df8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ