8b8f3d6583b54423ffa076a0486b9265a60dfb1b7034ba0e842a811e70d6857b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b8f3d6583b54423ffa076a0486b9265a60dfb1b7034ba0e842a811e70d6857b
Size

1.8MB
MD5

9b6affda4938f54a6c744f1b311dc55a
SHA1

b4173bf2b686697945eb8637cb88a58ac67d8ff0
SHA256

8b8f3d6583b54423ffa076a0486b9265a60dfb1b7034ba0e842a811e70d6857b
SHA512

1a381adba81b53c6191c46c92e2174b6f03503683bc4cf2e42fe6cafdd03e09272a7463b7e1a0100b1d8e63b6ddac2a2f04f1804db28abae81d444a418fef3a8
SSDEEP

49152:is/f+Y8u/zNG1DjKeijoT/TKKyPaw9dXWKZWjFLrusxadmjCUETL:TfXG1fKeiM/T/ySw9RZ4XadiC9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8b8f3d6583b54423ffa076a0486b9265a60dfb1b7034ba0e842a811e70d6857b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ