696ed3e87a28c5121cef03f3efefc16441c63dc9610184589bd4039e18f4dc4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

696ed3e87a28c5121cef03f3efefc16441c63dc9610184589bd4039e18f4dc4a
Size

131KB
MD5

00c31fee129a936d22fdb2e8f9415b42
SHA1

6ec0bf2a1c05af8c961787dcd2096899b55b48aa
SHA256

696ed3e87a28c5121cef03f3efefc16441c63dc9610184589bd4039e18f4dc4a
SHA512

469f7740ed72e70a18a4cb14acfa76a7f28c1533ae0ab5849f9d901ddf094d7cc276db1f674af4318ac2e2aef73d4750d723cd65249461e3806e0d87f9a10615
SSDEEP

3072:BC868JSfgM9UevQpg7JUzdbJPAzQCujnHOkEEilnDT:k8NEgUlKsULPAzt0nHOkEEiln

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

696ed3e87a28c5121cef03f3efefc16441c63dc9610184589bd4039e18f4dc4a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 384KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ