fc324811dc39008e32e1ba072b990d231ab1256683d8e6d1eb7d8577f502496a | Triage

Sharing

General

Target

fc324811dc39008e32e1ba072b990d231ab1256683d8e6d1eb7d8577f502496a
Size

436KB
MD5

1eec0be91815d071f24bf8cfa5180e6b
SHA1

0d25d91b6595980b17967d88e3042f9d71d6f6fb
SHA256

fc324811dc39008e32e1ba072b990d231ab1256683d8e6d1eb7d8577f502496a
SHA512

8dc594d8da1240f1974c6c45754b8b87d7e264f67e559a559ce3ffc950cb9d4e6fccfda2ab8bb1ca6e44170d69771f6392604c0fb54f3f179be9862d745435c1
SSDEEP

6144:fubcteGSWg/ZoFCuk5CJR+dpvIi6rLGniZuBFIRNejeG1fdtn4g1JkPWUiYO0c3J:fudx/ZoUBFniZyIi7Ln4g1W+UFO09a

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fc324811dc39008e32e1ba072b990d231ab1256683d8e6d1eb7d8577f502496a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 430KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ