b0614c828e2c86a749dd5c7a5c248e61b2a3a932c0301193075e5473fccf0ffa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0614c828e2c86a749dd5c7a5c248e61b2a3a932c0301193075e5473fccf0ffa
Size

132KB
MD5

fedefb76d3bc69ecc73b3ef7ef87e48e
SHA1

bc44afe5c8f95d38ce429024e02167c694efcac0
SHA256

b0614c828e2c86a749dd5c7a5c248e61b2a3a932c0301193075e5473fccf0ffa
SHA512

50027af19fab028e48e252caa62e29c071d3d9d2da69236748743492a73cae7edab771bb6681919af6ec65deeacbcfb0e4ede640a35f89e226a281615fdfe8f4
SSDEEP

3072:7Fs2O0XuH5xoZ6ZIfk5CFu+chli1VUNDnryo4PyxB2ZPp:7OfsW5yRfm2FQlXyo4PyGB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b0614c828e2c86a749dd5c7a5c248e61b2a3a932c0301193075e5473fccf0ffa
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ