bf3debd8d784e6d999873dc2bd46f439f4db415e1c1f0560ffa1c79f804ada07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf3debd8d784e6d999873dc2bd46f439f4db415e1c1f0560ffa1c79f804ada07
Size

722KB
MD5

1328a0dcc7878244223c8316fd9ff4e0
SHA1

3e5c314228f1304f1f58a1c5d0a8f06da422bd37
SHA256

bf3debd8d784e6d999873dc2bd46f439f4db415e1c1f0560ffa1c79f804ada07
SHA512

dd49dfb8b61b1b735b57e58a83cf9f498bc25ac47e57ecf82461ea00f4d7ee2d6cc0bba899259ebfb7a941b3be2bd470f1e8e76f0df7b514d0e7779907549906
SSDEEP

12288:jt0VPFfsKAkrbPlXhHANUTNqmkRHANUTNDs:SFksb1AmkNs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bf3debd8d784e6d999873dc2bd46f439f4db415e1c1f0560ffa1c79f804ada07
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 796KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 153KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rol
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE