bf4a421538c664363564059f6ab6cc2b09e0602919fd1082dcac23044e4c209e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf4a421538c664363564059f6ab6cc2b09e0602919fd1082dcac23044e4c209e
Size

76KB
MD5

f06f01fa051d5714d45453b4ce8c6d3e
SHA1

b5d222bb2d7477dd1872fde628fa3b666f25fd8a
SHA256

bf4a421538c664363564059f6ab6cc2b09e0602919fd1082dcac23044e4c209e
SHA512

9d404153ace35236c0212b266ff3c6d02dd9e37238af2bb54c24b8a57c4143f4bdd4d94b1d4b53c90429d73c16a6a0ccf0695f45598e9490db36639a98df27c5
SSDEEP

1536:TsvhCvUIWYoBWBiKG7bt4KY0SfBTMtc5x7qCcM/QCWQY:TqCBWRBWUBulG+QTQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bf4a421538c664363564059f6ab6cc2b09e0602919fd1082dcac23044e4c209e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xuhoihr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE