be843daa5e4298cfc7ac629d7928ec3b43d61230be57aa99b5a7c63f30e4f8f0 | Triage

Sharing

General

Target

be843daa5e4298cfc7ac629d7928ec3b43d61230be57aa99b5a7c63f30e4f8f0
Size

929KB
MD5

dff3eacc5af287364c9f7c2d1db6d6eb
SHA1

612abe186dd2cd2d039fc14b2719b9bb272b5f26
SHA256

be843daa5e4298cfc7ac629d7928ec3b43d61230be57aa99b5a7c63f30e4f8f0
SHA512

e924ed0c80ab595f054ac34d28aebf0ebf4a0ec90daa003a894830d5931824b67a842881fa25a39c8e8dc160a5c984af0afba7bb5e40200a4fb0708bcb7fa25e
SSDEEP

24576:lslXB0Eo/M+teLfBoioRipU7RPHGxqfS7bWCg6+v7O9hQA4Er:OlVQAfBwioOESmCg6+jO9uv4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

be843daa5e4298cfc7ac629d7928ec3b43d61230be57aa99b5a7c63f30e4f8f0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ