37712f54febfd19c8ef80836dda3ff2c09f12b95b35ad397b616713cdce51f07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37712f54febfd19c8ef80836dda3ff2c09f12b95b35ad397b616713cdce51f07
Size

15KB
MD5

726244fc2142507ba5eb98e42df9e280
SHA1

d155788cdc11458327bb9c88a26ceedac8db7479
SHA256

37712f54febfd19c8ef80836dda3ff2c09f12b95b35ad397b616713cdce51f07
SHA512

063cff2641ac8ae2717e27e580d6941ab6d84599eb1436bd48b03195bac44e1e6a065ac72c1c91ab0ad2df6a06773de7c82b1cb017a715d281a1e961b561620a
SSDEEP

384:tQJeEvs8TxvymSWkedB7ApLCkS9f+i+p33/P3HdYwU:tQJblvyzIQk+ieX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

37712f54febfd19c8ef80836dda3ff2c09f12b95b35ad397b616713cdce51f07
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ