6959a1c1b7fdb715a03f5ed23711690baa7832d9fdf3dd3c04d7fb06e8197661 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6959a1c1b7fdb715a03f5ed23711690baa7832d9fdf3dd3c04d7fb06e8197661
Size

492KB
MD5

c6841f6c8007460779501dab034a1f19
SHA1

772c41a02b3b7e5d85477e9f82e832b3e0fc7650
SHA256

6959a1c1b7fdb715a03f5ed23711690baa7832d9fdf3dd3c04d7fb06e8197661
SHA512

825edc9cf2a61b964e4d12aa3cbcf340276eb6d4c277f63dfe83058aeb8849b8cd39cd80e61cae2b2c47cdbfd2c59c9bc1b4807c8a5dbd23c99c165d9ef92cd1
SSDEEP

12288:+I3ScusHN2oxJF+nO6KQodM9rxxkguhxzgVb+yk:+IdN2qoOi1vxkgurzgt

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6959a1c1b7fdb715a03f5ed23711690baa7832d9fdf3dd3c04d7fb06e8197661
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 724KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 398KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 576KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ