1196bb5a793cfad135b845efa6db346ef64f1562f9fa034448b84d9582f3515e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1196bb5a793cfad135b845efa6db346ef64f1562f9fa034448b84d9582f3515e
Size

369KB
MD5

676fe3de257fbcd80b15f2b5e01ec239
SHA1

24df7736c899ee54b1cfb04692e1d131ae8956db
SHA256

1196bb5a793cfad135b845efa6db346ef64f1562f9fa034448b84d9582f3515e
SHA512

885cc6a7188b5c3f32d58c77d6f1e7bc9340f0e5fff801e124a5b7385922528686311ef58936d1463a50af69b6404a95ee442a192a9fbbd7a90d46b7447eabfc
SSDEEP

6144:ozYYiVxbugCEFzsuMQHB4hWDUx4qOHCmuIdiaVo52hITYrgvD:NVpHjzsi2hQQHRAhIT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1196bb5a793cfad135b845efa6db346ef64f1562f9fa034448b84d9582f3515e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 708KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 358KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ