75b0002bf83cf880c242a58951233ee15e20613fea9c63ee399789ad9ee91d67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75b0002bf83cf880c242a58951233ee15e20613fea9c63ee399789ad9ee91d67
Size

121KB
MD5

6ca5806c2c75fc641f07e9668bbc740c
SHA1

1b42a19e7c1e17c6c75b9da7f4468270c341cedd
SHA256

75b0002bf83cf880c242a58951233ee15e20613fea9c63ee399789ad9ee91d67
SHA512

77e935821ec7225e639498c71339a55e5fa9d1f36ed87c0e4ef62dad4c7774a9dcd8372a57b47af57d5644d51797b224325824d35ccada972f9cf7b8d85864d8
SSDEEP

3072:mKM638sm8D8J2/Xk9Gqujft3raqsRQ2zavvNK5apW:mKF8smuwC09Gqujf8qXZXNKY0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

75b0002bf83cf880c242a58951233ee15e20613fea9c63ee399789ad9ee91d67
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 376KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ