de29ca7a72c4db1d7c05bd9121111c121f6a29cf392532db852afae051f9d585 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de29ca7a72c4db1d7c05bd9121111c121f6a29cf392532db852afae051f9d585
Size

54KB
MD5

5cb5ab0f73a71ff7708d41ee032e08ac
SHA1

ac677dbf43f8714fbcbf4f4d9ad79acd1721fcbe
SHA256

de29ca7a72c4db1d7c05bd9121111c121f6a29cf392532db852afae051f9d585
SHA512

844f8ae496f3ea102ff6536f4f98eb458f4c03246a094db4185998aa8bf17fce178524e994d6a6845f09b113fa403825a581571e500f91dfe7abfa4a8e4e3e80
SSDEEP

768:xO7zPrAhzQ3AYEyblPco6nSacSrm//fhm+K5Y0zDr35POtayvefHyIPDv:QnQH/nSDZm+K5NTwvvefSIP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

de29ca7a72c4db1d7c05bd9121111c121f6a29cf392532db852afae051f9d585
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ