1fcb87fd2c975f85edddfc4350f4df009499b4f23bf3c2a59682ed374fd5900a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fcb87fd2c975f85edddfc4350f4df009499b4f23bf3c2a59682ed374fd5900a
Size

34KB
MD5

8521ea04f5f8cc4c930eedfb39727091
SHA1

7e8f358e8fe35e49c8d8691e8c318deb8b139156
SHA256

1fcb87fd2c975f85edddfc4350f4df009499b4f23bf3c2a59682ed374fd5900a
SHA512

fc132d1662a701a34288b2f6ec89aaea06c51afe9a37cb41478c313a07fbe61f630e59e3366cf20b049f0849f75b467cfc4243e75fecaee96b9fdba8b49a2d36
SSDEEP

768:xCdVBBCua4tiPKoJGxihB9J50ZWSmWHZ2Hr3DOykUh:05B8T0iX9J50RZ2L3Dw

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1fcb87fd2c975f85edddfc4350f4df009499b4f23bf3c2a59682ed374fd5900a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE