6dbd42412b31b3d5444f05c932cbdae01dd66acff80b4601179a7447a886b398 | Triage

Sharing

General

Target

6dbd42412b31b3d5444f05c932cbdae01dd66acff80b4601179a7447a886b398
Size

230KB
MD5

ea39cc4ce5a5fccd258f07f00e45eb60
SHA1

513c8075cc5150ab50fb2c6ad1607b7b970444d4
SHA256

6dbd42412b31b3d5444f05c932cbdae01dd66acff80b4601179a7447a886b398
SHA512

37709edeca02c4e2ffabf9968eacc154739ad10a1dd6aac3867e733f34c4dd7aa374400b747b22132c2bbfaeb2763423b4917aab1f7399badf794d0ff38fb7f7
SSDEEP

6144:/e65IUs9kduWtGbQ+goRYpoqsmJioxv4HrF4W/UDyFUNM:265IxavtGbDpRY/pJi04Hmyr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6dbd42412b31b3d5444f05c932cbdae01dd66acff80b4601179a7447a886b398
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 210KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ