854f0c58ca997d133578185e5f220b34dfbe8184c1396fe7d32558680b754e97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

854f0c58ca997d133578185e5f220b34dfbe8184c1396fe7d32558680b754e97
Size

22KB
MD5

923f915acb226325da9d956950fd0047
SHA1

c10c353da686a75543db4781beed04b3aebf9f30
SHA256

854f0c58ca997d133578185e5f220b34dfbe8184c1396fe7d32558680b754e97
SHA512

6a752f38726927a6224df6cee3919df2b58f15d982fbd2d17e7ab22d2dd38161c0dc9f8d252227cb9eea8d53079dafbf9902bbd73616589c7aa36a9369a74540
SSDEEP

384:nP2Z+2kas4g4DVNNxx38gP0YbUmYGgZNL7Z7t3:n9oeoVH3PPFbUZGALVJ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

854f0c58ca997d133578185e5f220b34dfbe8184c1396fe7d32558680b754e97
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ