640ef8a25b46a3fd4ed98aab60e7a433da584278e2b2bf262656049112118e27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

640ef8a25b46a3fd4ed98aab60e7a433da584278e2b2bf262656049112118e27
Size

436KB
MD5

b65ed2493cedd4b30f2d924018dfeb4e
SHA1

40938b7fc0023ac654db2062d4c6ce8c3dd1c30e
SHA256

640ef8a25b46a3fd4ed98aab60e7a433da584278e2b2bf262656049112118e27
SHA512

417d28fdad3a01a788adc1f25a11defb9ac66fff98150c67e014efabbff0f870c3f44eaa53d9cbce8420d0aba940a3eba7a0e3a2b938136193b3f7a5b9e71e0b
SSDEEP

12288:N1ogN3x0xyHWiz8Z7st0n3tJ/0p3yTFmRg:3th0xawVGWr8p3yZma

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

640ef8a25b46a3fd4ed98aab60e7a433da584278e2b2bf262656049112118e27
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ