6e8ff505f07db3fdd6be4dd4c62acd0ce30cee039c410d3f1d9a528a833a3129 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e8ff505f07db3fdd6be4dd4c62acd0ce30cee039c410d3f1d9a528a833a3129
Size

157KB
MD5

4fedd0f0ffe52a9f8073c89ff60124e0
SHA1

3f9b9a855e32ca9901547e8dc230590d90655f4b
SHA256

6e8ff505f07db3fdd6be4dd4c62acd0ce30cee039c410d3f1d9a528a833a3129
SHA512

e8a6d8ce9627862e523e498c53323da0991ab2bde8ff238d43b9854909ce387a9719ef63cead00c28505a765ae3146256a2dd8f2ddc1e33671dc8e0292bbb998
SSDEEP

3072:KIs9QBv2HWBImgyKN/4FAVJlz0rplvLmzOCZKR+:KI1GSgjN/4F+zyppTCZE+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6e8ff505f07db3fdd6be4dd4c62acd0ce30cee039c410d3f1d9a528a833a3129
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ