b92346cb61727c0c9d0ff64678dd2b2fc8ab6c3c44a99a8331aa2dd15f905277 | Triage

Sharing

General

Target

b92346cb61727c0c9d0ff64678dd2b2fc8ab6c3c44a99a8331aa2dd15f905277
Size

614KB
MD5

71fdf0066ddac9e559722c59c27c3f25
SHA1

d8a27cce2fd8f4d135a40b4c80e3c961d8ebdd0e
SHA256

b92346cb61727c0c9d0ff64678dd2b2fc8ab6c3c44a99a8331aa2dd15f905277
SHA512

99b332567f4be1784e469f3c30247964e4a2a5a7346f0285af01e82a65b85b37411e8105499e6e5ee4e893ed08dd6bd4abcf2989a2526d96dd949e0774c27f11
SSDEEP

12288:KlWA9ZqwsbFqnXlV5e+RMR+E9b8WNqb42d9TOZJ3RlXrzicCZM8QhJb+V6/v:tA9MwrXC9bHNy42gJDqK8Q7b+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b92346cb61727c0c9d0ff64678dd2b2fc8ab6c3c44a99a8331aa2dd15f905277
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 648KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 572KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ