6891f9785b3c0879aa7c8c1b7eaacb60db374086a32738a66df91f7b863a37dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6891f9785b3c0879aa7c8c1b7eaacb60db374086a32738a66df91f7b863a37dc
Size

486KB
MD5

cfc844269a82c6aea6ac2ee087d32088
SHA1

13309d89c20cffda8e044912f5ad8353aebec018
SHA256

6891f9785b3c0879aa7c8c1b7eaacb60db374086a32738a66df91f7b863a37dc
SHA512

e18dcccde44714f09e8798434bd7fbb7878a9557e18adcabed48cce47b04beef10eddc633eaeb740cdb090836be12971f462d3e0722833c1276b5db02cdf5492
SSDEEP

12288:Y5fQvGwmPRRRuPWtkGdxkwPzbB9RhcybwY+fcE9qYlJ:+fQO7uIkkx9nB9ApPNJlJ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6891f9785b3c0879aa7c8c1b7eaacb60db374086a32738a66df91f7b863a37dc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 692KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 423KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 576KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ