2b4d1fc55ef74a0d16d67a55fa02358df082876c0125c305bcc747e21571c027 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b4d1fc55ef74a0d16d67a55fa02358df082876c0125c305bcc747e21571c027
Size

168KB
MD5

dd9416970c02817e2e144ac358b995f0
SHA1

c080d2c56b5698b5d2945942dd8625421f63515c
SHA256

2b4d1fc55ef74a0d16d67a55fa02358df082876c0125c305bcc747e21571c027
SHA512

16560e877f31ba108dac585a86d759e479dff8c1c33dba543071dff208ea24a0441ba23e13ca95dde5eb122186500c6fa510bc5b77e8c181752b2caee4a26365
SSDEEP

3072:Fkg2P3U9iwwAV+kM/FnkRG6AEytTC12Zr5FS374k0VycXoMEvwswwbnlE:Fx28ip1kRG6AZRrjS3c0cXoMOwswx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2b4d1fc55ef74a0d16d67a55fa02358df082876c0125c305bcc747e21571c027
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 316KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ