bfc8e3fc9012ad9fb8d88a819510d16e05e6a2cc76123c724ed081bc33877af7 | Triage

Sharing

General

Target

bfc8e3fc9012ad9fb8d88a819510d16e05e6a2cc76123c724ed081bc33877af7
Size

196KB
MD5

c83c22a7a727c8ef1525e3e49e2cc470
SHA1

84c2bf9f2b94edb82d1ea7e2ee0dacee9715c661
SHA256

bfc8e3fc9012ad9fb8d88a819510d16e05e6a2cc76123c724ed081bc33877af7
SHA512

ecadd81f8d3f88fe51ba32b7436fac172f5119a94648896552d3916ccb7f58f0337412ed7f1b7db842fabd1253a3202d98c27f3cfed6035af2b087477a9c1945
SSDEEP

1536:RQoCtrPFES5hBEKyw3qzsfhfFlT2ZOcmFa3hd+g/NPzM+n:RytrlBREwZN8OcIaR3NPR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bfc8e3fc9012ad9fb8d88a819510d16e05e6a2cc76123c724ed081bc33877af7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ