d75f932666e1278dda7c8ad677282d23bc4c3cbebbb5404d6596f27b0e0b8f21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d75f932666e1278dda7c8ad677282d23bc4c3cbebbb5404d6596f27b0e0b8f21
Size

122KB
MD5

510e6bfbe1c18c7c5a41cf30406d7fe0
SHA1

1e1ebbf5c4155af0933434ff16aac2cf4f1cf750
SHA256

d75f932666e1278dda7c8ad677282d23bc4c3cbebbb5404d6596f27b0e0b8f21
SHA512

e2e8f9657110409edc915ee6754ad1bf40e466ba756b80530e16235afdeed7e5fc353c3619ac7a604618fe30587696f717a4dec71f9e729558f45c306cf9f99b
SSDEEP

768:YShup5jBJBtkUIrIkR4DXNuAbhCYxsZorh25zvo+Z0eLaolTsHB+tawho4:dheBtSIpbNuAbRmx5z5ueG6Tc+taC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d75f932666e1278dda7c8ad677282d23bc4c3cbebbb5404d6596f27b0e0b8f21
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ