2d847b48279d58b59880336213b3c88fdd0d51404a497ccc8b216916f676bba3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d847b48279d58b59880336213b3c88fdd0d51404a497ccc8b216916f676bba3
Size

509KB
MD5

3ba00f36faa1abb503307cd817febe8e
SHA1

7a9136f26326a216cd0b8067202eecde9235f7a6
SHA256

2d847b48279d58b59880336213b3c88fdd0d51404a497ccc8b216916f676bba3
SHA512

939ffaa7dc2cb5f652e62b51d6cbc054d89822f5eafd5e2823117cf91d54cf78558b170dc5c8272de2104c09ddb6d58c6e7251fe8977c49e7a008c8d0a10b595
SSDEEP

12288:gOVeZJys73dOvXDpNjNe8SaVCPZ1eZJys73dOvXDpNjNe8r:feZJ8NI8BAPeZJ8NI8r

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2d847b48279d58b59880336213b3c88fdd0d51404a497ccc8b216916f676bba3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ