bd8502a3e614a115f856c780f6d6a3449dca1c19989d4edb66a081f3edfc864d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd8502a3e614a115f856c780f6d6a3449dca1c19989d4edb66a081f3edfc864d
Size

392KB
MD5

bd0776d5b7868963fb057b11ea9840a1
SHA1

e3f925c90a07316f4b83e55fb37a13355cd19bf7
SHA256

bd8502a3e614a115f856c780f6d6a3449dca1c19989d4edb66a081f3edfc864d
SHA512

d0b143fbe844d0e79555539e29b1a7aa1e10edf6c9bf13120d3373a29543b076b62801d67440f9b673ac0b8090e900bc4365293d76e0222184bdc0f936d81285
SSDEEP

6144:995tzHMtwDMNpqWalBxAMT2duzaYcaafl77Qo3OtghC+OHZNrQKHLgEnsU:D5BWmMNkhZAKmYcac77nrCHZNFLgEn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bd8502a3e614a115f856c780f6d6a3449dca1c19989d4edb66a081f3edfc864d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 580KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 390KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 717KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ