16c532c7e47107c22ded2d75d1ec43907b8d992ef06859d4513bbebe8868cff0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16c532c7e47107c22ded2d75d1ec43907b8d992ef06859d4513bbebe8868cff0
Size

16KB
MD5

19cac4611c01cf8575f8bb64735558ef
SHA1

a44ed0c629d8833472985f51c61b7ad2fe48d5e5
SHA256

16c532c7e47107c22ded2d75d1ec43907b8d992ef06859d4513bbebe8868cff0
SHA512

389883297538ca61f9bc0bed389cd2834bd9d880ed9faa0a48b82a133d9c195506949301ff5f090caa6bcaa4331e32d96c35d0e7ea724d7122fa4eb00936e5ac
SSDEEP

384:kgyPzII6FnkGwijnpawRgfase1EtjMzt63IUU:nItE7kKWah1nzGC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

16c532c7e47107c22ded2d75d1ec43907b8d992ef06859d4513bbebe8868cff0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE