b1d6c60e7dcbe6a440f78e6d71ddc826f99a71c1657b467e2f902db2ba2f12ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1d6c60e7dcbe6a440f78e6d71ddc826f99a71c1657b467e2f902db2ba2f12ff
Size

15KB
MD5

7ba5d5a78da0988cd723f0fef76a2a57
SHA1

3a2da71ed710787ccd6dca3462ff78273e70d05f
SHA256

b1d6c60e7dcbe6a440f78e6d71ddc826f99a71c1657b467e2f902db2ba2f12ff
SHA512

c33082f0031b67884f6ba08ec3640b9f682e9a91a9c34a5c28b86d1a7810925fab9418ea0403b5a90dc1e2d0a61389e6626ff7346a0a39587314b34f8563eff6
SSDEEP

384:wBbbcqKdv1aGuIFm3UGtTk8mm2bN0U0ofZS2YPMX3:a3Kdv15OkGeuiS2YPMH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b1d6c60e7dcbe6a440f78e6d71ddc826f99a71c1657b467e2f902db2ba2f12ff
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE