8b80cd0156a90d1c70d7f14789d411ed93dcf97029d39ff34a1ff371ee06dfdf | Triage

Sharing

General

Target

8b80cd0156a90d1c70d7f14789d411ed93dcf97029d39ff34a1ff371ee06dfdf
Size

69KB
MD5

42228b6c7ec0e31ceab563ee8030dc07
SHA1

18120377736eab39fdeed93341217907da8e461c
SHA256

8b80cd0156a90d1c70d7f14789d411ed93dcf97029d39ff34a1ff371ee06dfdf
SHA512

8847e0e890a61ac4080b935186a7cad194f9a5377fe31a2fa9e3020d4f817ab6de2c50abf758c1576a6a5356d6d0ee0657ca7da84c216307a34f7e2ae4abd1a2
SSDEEP

1536:/8sGJJimZDzfq4nObBzC4qlSZ/e2pr4N0HG8fd4ZS4q:/sJJiAbObBzwh2eaFd4Zlq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8b80cd0156a90d1c70d7f14789d411ed93dcf97029d39ff34a1ff371ee06dfdf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ