b1a2f7910a5240fc390d37d6ccaf7f916b08bdad8c4cc8deeafe6647ed540acb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1a2f7910a5240fc390d37d6ccaf7f916b08bdad8c4cc8deeafe6647ed540acb
Size

382KB
MD5

747a9ea25ebcb7d8f26dac02cbc82681
SHA1

f72a6b34d0e3eefe8d2a8aa629ec4fed6733c209
SHA256

b1a2f7910a5240fc390d37d6ccaf7f916b08bdad8c4cc8deeafe6647ed540acb
SHA512

c85c1a1c7cc2213b706afcc37840a6c2f141328d686c64883337c40bd15722d1e65c5c82440b2aaa89bcc3993a771553492787545626918cc96a3eb8cc5cc137
SSDEEP

6144:kT5yjdBqXecPsFcXkyK/5rE3DkJSkBSoCt3FfIv1CTo6fpZMW1/Ikx9rgZ:2yXuecPsFs6cDkokBs3le1IpZ51/O

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b1a2f7910a5240fc390d37d6ccaf7f916b08bdad8c4cc8deeafe6647ed540acb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 496KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ