830dc3083a90881af99e273737b678761c7bd40acadf601a8c1f6a487067823b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

830dc3083a90881af99e273737b678761c7bd40acadf601a8c1f6a487067823b
Size

644KB
MD5

bc6efe231a6ce1e6b4f5c5ceeb9d306c
SHA1

1db2b02943f9a427eca94ccbd92f1f91c23ebc49
SHA256

830dc3083a90881af99e273737b678761c7bd40acadf601a8c1f6a487067823b
SHA512

094b3e158f1ace89b0d7e3f552a4d53987f3cd25262de9320491997d356f371f5f4faf2e332cd8e6f00c378cd1fab20843ac664cf4031768bd3bfd689d41c21c
SSDEEP

12288:HHshSIcpjYzdASU9KGaP/KuvlwkUL+thURhG9xU204YcuUBkQEOVulB:nshyS2SU9XaXfS+thURhW+29wQE7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

830dc3083a90881af99e273737b678761c7bd40acadf601a8c1f6a487067823b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ