ad6f4587bcc550729efbf8f969171dca783bf3bf495c15236e35cfc33121e12d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad6f4587bcc550729efbf8f969171dca783bf3bf495c15236e35cfc33121e12d
Size

64KB
MD5

a8f91e98ca4f3a9bdaaaf4a6f41835e3
SHA1

f916c0e8cc7030ec31dddfaed7dc33e261b17197
SHA256

ad6f4587bcc550729efbf8f969171dca783bf3bf495c15236e35cfc33121e12d
SHA512

4dc012093391cc07629598f3c2d06184dbbf507b40088de628defb23535f1ae70ccdef99e6f7fed85ab100618f6fd7c9dd16b1297b7b26e55ff296d9cf470947
SSDEEP

768:vp7kWBtvPLp8jtXwGS5QLnptVHhczyj8sef/OEd6Cj02n2ZO9o1dKRvzJOETcNSC:JkWbn18k5Ipth6zywf/FdjVgH9U+F

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ad6f4587bcc550729efbf8f969171dca783bf3bf495c15236e35cfc33121e12d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ