22b3c0973286e69efbdd34a04c70e467c627a22a017483d40deb766c574143cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22b3c0973286e69efbdd34a04c70e467c627a22a017483d40deb766c574143cc
Size

8.6MB
MD5

8d6e13551fc7cd8f82b2ce8ac4a10cb6
SHA1

880942a3f06314e3d2587a5e4a559f33d2642cfe
SHA256

22b3c0973286e69efbdd34a04c70e467c627a22a017483d40deb766c574143cc
SHA512

bb90fd3753f7ac2b9834b6e4365a5658d6a2a710658c4c4973c5a9ca8e0b6e797fc32a54987390f72b5cf46d5fa877ea7579e7ba6fba3c940ee193b1e3abc7d1
SSDEEP

196608:Fr2Zr2Fr2Fr2Fr2Fr2jr2Zr2Fr2Fr2Fr2Fr2I:V2R2V2V2V2V2f2R2V2V2V2V2I

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

22b3c0973286e69efbdd34a04c70e467c627a22a017483d40deb766c574143cc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ