f1eedfd3d63287c0a63b1d283886e27c1db15c201981cbf6a6479b60e16696fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1eedfd3d63287c0a63b1d283886e27c1db15c201981cbf6a6479b60e16696fb
Size

428KB
MD5

68aaff47f73158e10db3f70b5585d305
SHA1

aae49731e2b48654d5e22ce5e219fe4356d70edc
SHA256

f1eedfd3d63287c0a63b1d283886e27c1db15c201981cbf6a6479b60e16696fb
SHA512

db52733e3de4ba18f88352cbdbcd15a5e436f04f81fdf8653b0bb25a3ef536cb67f512ad09afdbcac1ae61b070b594188497265b83963e46bbcadc4445c8e572
SSDEEP

12288:QMsoDDSBiIcQ//e3fvhLlFC0ZwICulD++uH8U95:hDEiIA3fJLXC271lDh08UT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f1eedfd3d63287c0a63b1d283886e27c1db15c201981cbf6a6479b60e16696fb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 418KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ