bd177f72e4a306eb6a555b802ad57acfc490b0d917b8514dc8700ccb1a7c5588 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd177f72e4a306eb6a555b802ad57acfc490b0d917b8514dc8700ccb1a7c5588
Size

302KB
MD5

df0202ece835c6d88a57203b80fb2525
SHA1

d5635abcc1afd2a69c285b78f7a8bf2a18fbca09
SHA256

bd177f72e4a306eb6a555b802ad57acfc490b0d917b8514dc8700ccb1a7c5588
SHA512

f3d3ecb6fc5cac812d10f8ba095448dafd1e6bab408cd61dc695d16ad0a25cfe8625a7b7b419449ff8e22252e491bc30a2f56e37ead06403a3c2f99eebe5e81f
SSDEEP

6144:7RyGveX7td7t1dH/E78SGhl26RMJiHYogy76Qz9fKPCuwDC3:sGwf7Ppg8SGhNMJi4py2aKPLwDC3

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bd177f72e4a306eb6a555b802ad57acfc490b0d917b8514dc8700ccb1a7c5588
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 720KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 297KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1000KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ