2d1e6ba438d3d00b2203749d15de3e929aa5c3f1989dfd41cd1d4bba9beed53a | Triage

Sharing

General

Target

2d1e6ba438d3d00b2203749d15de3e929aa5c3f1989dfd41cd1d4bba9beed53a
Size

208KB
MD5

254b03df553a127dfee43cd29e364b00
SHA1

a613536eb89febb0b041bc6730bf0ea0f54f327a
SHA256

2d1e6ba438d3d00b2203749d15de3e929aa5c3f1989dfd41cd1d4bba9beed53a
SHA512

e9c97a63c8eeb867f3e190518457eb8c4b7a0a775277f2f1aca7283b009e984bca18d5b9ba051d98aecb5377e356d0a3e707d3ae635be299748c4368ee407b3a
SSDEEP

3072:P4mI+FjAHyxBxbHTBsuSYXUcgDmBvbjjqve4z4PtL2HUpOASklovCIlwl:PvI+FCyRHm3F6vbSveP40p7W3lw

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2d1e6ba438d3d00b2203749d15de3e929aa5c3f1989dfd41cd1d4bba9beed53a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ