261b070b0a7401e706b07f1fea9a716269aa88989f125f8ced7cce2952acd47b

Sharing

Copy URL

Twitter E-mail

General

Target

261b070b0a7401e706b07f1fea9a716269aa88989f125f8ced7cce2952acd47b
Size

7.7MB
MD5

b2cc47fd5f28486673628fce40695e0b
SHA1

1b4e06cf0edbd7d742c77bc01710070b3df55c58
SHA256

261b070b0a7401e706b07f1fea9a716269aa88989f125f8ced7cce2952acd47b
SHA512

6ebbfa49ae65bdf10d5207e34a368a52f9f7ba0d48a370d9c7baa5b515a2a357504eb91932fc4b62a23570399aeef4061f347e43c21a4fd39b16916a8c940b96
SSDEEP

196608:Mlzt/IByy1Zz43h3jmknTQbc8KEFhuAAtkDHDWtWB++a5C1ysT81GtmyW:M5tArZW3VdcmWDWWB+1CAPAmyW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

261b070b0a7401e706b07f1fea9a716269aa88989f125f8ced7cce2952acd47b
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 7.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 335KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 281B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 34B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1021KB - Virtual size: 1021KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 624KB - Virtual size: 623KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 817KB - Virtual size: 816KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 7.7MB

UPX1 Size: 7.5MB - Virtual size: 7.5MB

.rsrc Size: 264KB - Virtual size: 268KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 5.5MB - Virtual size: 5.5MB

.rdata Size: 5.1MB - Virtual size: 5.1MB

.data Size: 335KB - Virtual size: 592KB

/4 Size: 512B - Virtual size: 281B

/19 Size: 613KB - Virtual size: 613KB

/32 Size: 144KB - Virtual size: 143KB

/46 Size: 25KB - Virtual size: 24KB

/63 Size: 62KB - Virtual size: 61KB

/80 Size: 512B - Virtual size: 34B

/99 Size: 1021KB - Virtual size: 1021KB

/112 Size: 624KB - Virtual size: 623KB

/124 Size: 200KB - Virtual size: 199KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 165KB - Virtual size: 165KB

.symtab Size: 817KB - Virtual size: 816KB

.rsrc Size: 264KB - Virtual size: 264KB

UPX0
Size: - Virtual size: 7.7MB

UPX1
Size: 7.5MB - Virtual size: 7.5MB

.rsrc
Size: 264KB - Virtual size: 268KB

.text
Size: 5.5MB - Virtual size: 5.5MB

.rdata
Size: 5.1MB - Virtual size: 5.1MB

.data
Size: 335KB - Virtual size: 592KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 613KB - Virtual size: 613KB

/32
Size: 144KB - Virtual size: 143KB

/46
Size: 25KB - Virtual size: 24KB

/63
Size: 62KB - Virtual size: 61KB

/80
Size: 512B - Virtual size: 34B

/99
Size: 1021KB - Virtual size: 1021KB

/112
Size: 624KB - Virtual size: 623KB

/124
Size: 200KB - Virtual size: 199KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 165KB - Virtual size: 165KB

.symtab
Size: 817KB - Virtual size: 816KB

.rsrc
Size: 264KB - Virtual size: 264KB