f01215dd7d576031c58142634f6cff34189f17e5d7ce0541807a1fb92481f806 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f01215dd7d576031c58142634f6cff34189f17e5d7ce0541807a1fb92481f806
Size

21KB
MD5

c292cee724f4d55043b73c2aa37b8a6a
SHA1

f901a3caf4ae55ad1bce49c943bd63955715437d
SHA256

f01215dd7d576031c58142634f6cff34189f17e5d7ce0541807a1fb92481f806
SHA512

f7d42df12dfb86afa5d407dea98850d0b594f5da1fa43977027f7af366ac5a16f02cf9e8cdb01b7fb9f20764a0d0792fbfc6ec477205514616dd5e9c7fff1368
SSDEEP

384:IO+myn3VlF7jgr3LE0WC/sUjGxsA3Yx9mg0IbJ/zs+9Xyyt:IOi3970LL+C/Y3YnUIV//9b

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f01215dd7d576031c58142634f6cff34189f17e5d7ce0541807a1fb92481f806
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ