821521e10fcd3a5885d554e96618249a9ee12085de16f4845df350e542de41ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

821521e10fcd3a5885d554e96618249a9ee12085de16f4845df350e542de41ed
Size

16KB
MD5

9d03ee1473cb259412315b766573c843
SHA1

6b224f8d1923616d4b1b640451ccc2aba15cb95b
SHA256

821521e10fcd3a5885d554e96618249a9ee12085de16f4845df350e542de41ed
SHA512

65862047f72567fe38df5e3ac77c94499c109b3124c0a726a5c3b6414c627c259e1f230cc1d735480bac7e5f3ffe29b775969cddfc1fbb14a6e9257c986a9c55
SSDEEP

384:PaOXoUL1+fDZ3mRTjMfS7eiRVVKDjH8GPwwXhvTYoKMHq0tv4:jDL1atiRHKDLwwXhkoKMHq0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

821521e10fcd3a5885d554e96618249a9ee12085de16f4845df350e542de41ed
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE