b87a2b0963a163122e33f9b1aca8be905646cd8f73995bc242731631aa20eee6 | Triage

Sharing

General

Target

b87a2b0963a163122e33f9b1aca8be905646cd8f73995bc242731631aa20eee6
Size

81KB
MD5

44f5024e8d8c887fff982212753fef73
SHA1

fe98b998aeaa11597b1bf62ae779535ddaf4545d
SHA256

b87a2b0963a163122e33f9b1aca8be905646cd8f73995bc242731631aa20eee6
SHA512

76802437ca168ffaec9365e92cc1fdb29120e7402a1864eece6b03ff1cc7ffd7ab697dd36e405da9cddd07aad8253320ec9560519f784ab29cf072c4d8ad5267
SSDEEP

1536:Dd8XvWbmH5VO1VXHZorvjg904fGb9/gqM3f3gyHnDDCu76zvX4iggWOUIbqzecnb:Brbu43ZMg9004yHnDDzOzv3gPOTGeqb

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b87a2b0963a163122e33f9b1aca8be905646cd8f73995bc242731631aa20eee6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ