f6d9f73967684baf51095851a27bf8a18295e2c425951ae13a4035f22d5ca55b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6d9f73967684baf51095851a27bf8a18295e2c425951ae13a4035f22d5ca55b
Size

2.0MB
MD5

710305e03d8ed8f3d1c2bac3d36cf6b3
SHA1

c263508bd406548736966672c71cfddcdebabc04
SHA256

f6d9f73967684baf51095851a27bf8a18295e2c425951ae13a4035f22d5ca55b
SHA512

8f055f677c148d035190db6a1c42f3a88c5563d4722fe433343e09c81ab84f1a524587c4f06e5fc0836ed0f17876368157b027b61dec1591aa26dad1d4ec2d79
SSDEEP

49152:Q7LZBRIbC0zNb/lYBECr7TJ+G8BHH9vHu87ZovY46IHfuX/weW7gl3pk3uT:WFEzzN9079+G8HHpO87Zow4rHfuXYeWw

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f6d9f73967684baf51095851a27bf8a18295e2c425951ae13a4035f22d5ca55b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ