b8953c4564eb80f3eb1fcbf4f92d9fc1fb04ebe75108778a000aa8ccc3834259 | Triage

Sharing

General

Target

b8953c4564eb80f3eb1fcbf4f92d9fc1fb04ebe75108778a000aa8ccc3834259
Size

676KB
MD5

8a52811f8ab4b6c2d19576397232c171
SHA1

6885079a4c3c49c1202082dbac25e7107e651caa
SHA256

b8953c4564eb80f3eb1fcbf4f92d9fc1fb04ebe75108778a000aa8ccc3834259
SHA512

d38d1c0c498fe8c4d97b5d47cf621ab023ba92179a7f10aa5cc3ad97e7ff9bba94ab83eea95ed82f738046a230366ea354b709c076260c4af63ebb1eae562f26
SSDEEP

12288:Gjag8Ot25JJVZaQeph9eCJqEcYXwVngi8c8smgadeju3wAS/VmaEkjXu:GeyqJBaLh9QnvxV7adYu3wZVmaEkj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b8953c4564eb80f3eb1fcbf4f92d9fc1fb04ebe75108778a000aa8ccc3834259
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 980KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 548KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 880KB - Virtual size: 876KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ