739c2dd76d65ba83fb9edaf55ebb00d201c5272413f941ad5d161e3177685174 | Triage

Sharing

General

Target

739c2dd76d65ba83fb9edaf55ebb00d201c5272413f941ad5d161e3177685174
Size

81KB
MD5

66f0cd3f56141d471275e6fd39a5bb1f
SHA1

7af51c1f449128588c572ad7b8b4b894e1cdf750
SHA256

739c2dd76d65ba83fb9edaf55ebb00d201c5272413f941ad5d161e3177685174
SHA512

0dbd0bfd72c356c0a8f19035c00986d0221819091e459ad71eee1dda989083455c335edcbd5ca295229f4d31fd4711d88b0778fea1e6538ade73d9dd55e59334
SSDEEP

1536:/7Og8zlJJTHbcL/4Syz0FNk4+E9B4S9xQ10zichA0G7/VNEsDiN/Ry2rY1:T74TIlBFZJ9B4SOpeM9NXeg4Y1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

739c2dd76d65ba83fb9edaf55ebb00d201c5272413f941ad5d161e3177685174
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ