69628b6636f538c0f152ef6c41175ff1073c8fe96370dda78adaf8f80f57dce5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69628b6636f538c0f152ef6c41175ff1073c8fe96370dda78adaf8f80f57dce5
Size

1.1MB
MD5

ff3d6c28ed4192716921001f6ca3a0a6
SHA1

add45e20359f6747109bbde84bc635649f13c1f6
SHA256

69628b6636f538c0f152ef6c41175ff1073c8fe96370dda78adaf8f80f57dce5
SHA512

19c647694df4c6de839ef6372553d0a0f8912d1edd14e7b5be90720ecbb7fe176cea20c179710e1cb13de3c8d47cc21dd9279c3edcfd40985d87b1e7cbd02be1
SSDEEP

24576:Esb+xzCe8UfPV6F0XszjJtXJLXImqsCxG/6QnNfva7Iv:Ey+xzPhPV6F0XqPXJLXImTyG/XnN3akv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

69628b6636f538c0f152ef6c41175ff1073c8fe96370dda78adaf8f80f57dce5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 908KB - Virtual size: 906KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ