17c6b5d90c36f861987160203004cd196ed8eec2937fbafd96354e56264ae077 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c6b5d90c36f861987160203004cd196ed8eec2937fbafd96354e56264ae077
Size

645KB
MD5

b1c0233b77770ca174e187f9a7c0cb64
SHA1

54782424e4b09b93418b0ef9555fa2e8e9c5a020
SHA256

17c6b5d90c36f861987160203004cd196ed8eec2937fbafd96354e56264ae077
SHA512

fb3b9d77e1497b9a7669f0a9dce1f9157dc27799129b969b7e3b87235700c3d599277c8cf5d20bdebefc2b80ded02d57db3e51d4e72f82f8eb4cb488694ec84a
SSDEEP

6144:5uHOJnmy+g4IE2EorG1VVE+I2GFrQZb++tdsHP4+QfI6UVE2EaBT1aRu8Lg4n:gOJakuxerQZb+md4w1UAaBYD

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

17c6b5d90c36f861987160203004cd196ed8eec2937fbafd96354e56264ae077
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ