67b8f1b67d0559917737a5600b8facdc17dcf6208b8513e6cd6302d9dd6fbc86 | Triage

Sharing

General

Target

67b8f1b67d0559917737a5600b8facdc17dcf6208b8513e6cd6302d9dd6fbc86
Size

373KB
MD5

c21914ffb3fc1baa3fa480e6ca5ffe4c
SHA1

26165f5a9ff1d8a3a7182288aa0a5d60cec26eb7
SHA256

67b8f1b67d0559917737a5600b8facdc17dcf6208b8513e6cd6302d9dd6fbc86
SHA512

38c55fe622032fd2e5a583403cdbe0a64f66fb75b1a74b0cb04f7e3b725e2023ebae8c402cecd20fc9c2a226ac3c20d167b3a0ac0d6cc33242c1759b03703a4b
SSDEEP

6144:T4PKmD46+O0y4A8fCLzHX1q50hBl7m8m7vh+rKcLYoG+N5d+KI6wrjlyRA:hp6+FAB30mt7m8Evh7/8X+04yi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

67b8f1b67d0559917737a5600b8facdc17dcf6208b8513e6cd6302d9dd6fbc86
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ