b0df7252635fc0286368e018b3eb9472e4e21df453f631fb82b61044654e8796 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0df7252635fc0286368e018b3eb9472e4e21df453f631fb82b61044654e8796
Size

40KB
MD5

09ee355f26247e18a9117079a93b1070
SHA1

ef94b01a484477fe8cbeb8a4d3e79efb1f0a45a3
SHA256

b0df7252635fc0286368e018b3eb9472e4e21df453f631fb82b61044654e8796
SHA512

da1838bdcffa53afce0891d84f8b0349d3083f2099dba5fc7f720a85c558cb0644d38c23191e24188a194bb65c2c282b8ee36c6d040d07346104de522b736c1e
SSDEEP

768:EF1SqAufGWm1VbghcmmKLmpwB9+yQwfziwqmn55p/yyGv3x5INpChpFHSLm:ESMiVbghcXKLIw+yQ0z55pKyeb2QpFHj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b0df7252635fc0286368e018b3eb9472e4e21df453f631fb82b61044654e8796
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ