85c4dcb35454eb650bc584778725e803005596a078446c4bcc1b56e9a18b3049 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85c4dcb35454eb650bc584778725e803005596a078446c4bcc1b56e9a18b3049
Size

47KB
MD5

3999d6f5f2be4ab7edc7330605f67ab6
SHA1

21f6758950469a3aaeebfdbb5bbdad06b82c7b12
SHA256

85c4dcb35454eb650bc584778725e803005596a078446c4bcc1b56e9a18b3049
SHA512

8a853a8ec9617e25e9972647957b25253284d2862fb951d068e863efd29dc18d59762e594f93978589ca513a8e0381790aaf6608f80bad219a8f9f7f6d27a7f4
SSDEEP

768:AgNDHRi9jlJO+7WTCm5MqTZ53tnhiuhEP809eX2A1puPW7MEyhdECP1UcfbJuq:AgN7Ri9bYzbzbiuhEL9KjuewJx1fQq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

85c4dcb35454eb650bc584778725e803005596a078446c4bcc1b56e9a18b3049
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ