ff2079bee75cb84494ae4b39a2cba2654cddd8498cbee9cba4f925362653cba1 | Triage

Sharing

General

Target

ff2079bee75cb84494ae4b39a2cba2654cddd8498cbee9cba4f925362653cba1
Size

487KB
MD5

3399a53d376910e796dfc7c24e8d506f
SHA1

4ddfc8cd02d72c1f022d38d7c2b6bfff87491592
SHA256

ff2079bee75cb84494ae4b39a2cba2654cddd8498cbee9cba4f925362653cba1
SHA512

6fd68386e72ab0f96d6322024c8bc79238cae2fd8c2377f23ed217d8fe1f756a6f09c95dbba45741013e718d1d0013c9daa19be0f0a3fb50366cc361fff53b52
SSDEEP

12288:yik5diJd83cpvevhSS4byNZMmtupNXbB18hePoY5L9FJZjWXFyF:yi2ij2MOSFTmtupNrB13AoL9FXyXFyF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

ff2079bee75cb84494ae4b39a2cba2654cddd8498cbee9cba4f925362653cba1
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 7.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 461KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ