82e6222a2c2b40dba6574140aee729034dc794d5309638ea2d7514624bbc52d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82e6222a2c2b40dba6574140aee729034dc794d5309638ea2d7514624bbc52d9
Size

291KB
MD5

c34239b09a95b3ae61d614d6c5d87e55
SHA1

d30ba1d9da4eb4d51b3743bfc5be90affd6a65fe
SHA256

82e6222a2c2b40dba6574140aee729034dc794d5309638ea2d7514624bbc52d9
SHA512

c4d205b28d872424a7053d86419b3e6e729565c387bc9761fdad856515c9ac0bdc0e9722c65baa15ace26fbf1f1731a75d5504e8b268c5ed5ea1e963cb9a3d4f
SSDEEP

6144:5uHOjE2EBE2EZ/UOPSe570Szp3irG1VVE+IA:gO+MyOB0Jut

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

82e6222a2c2b40dba6574140aee729034dc794d5309638ea2d7514624bbc52d9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ