0b2fa1e595ec5b75a04bc5c04762f7b2647b206278ee065495b1b47a337cfdbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b2fa1e595ec5b75a04bc5c04762f7b2647b206278ee065495b1b47a337cfdbe
Size

579KB
MD5

ab6d0eba86985df7e9dd95b555b966c4
SHA1

3aecb0f9f17bbb1af26afbcbf4f3f55c22459e91
SHA256

0b2fa1e595ec5b75a04bc5c04762f7b2647b206278ee065495b1b47a337cfdbe
SHA512

9c72c6fafd28070cf80a688ca10ea56acfc753cc6921dff5c63da00311eab8fdb80b4d771b47e703ef578328a2bf18a291f76d9814061057c73da2e8614154cf
SSDEEP

12288:nnMVukdTThK9v4amtQEMJPJRz0S2Ox3tmavdwxnm:nnMEwU9QxQEq6SVx9maV6

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0b2fa1e595ec5b75a04bc5c04762f7b2647b206278ee065495b1b47a337cfdbe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 960KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 476KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 592KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ