badbfc24dcef1663a71cf19a5d8409c8d795e16b7e4a7d4feb8778bd73bd7531 | Triage

Sharing

General

Target

badbfc24dcef1663a71cf19a5d8409c8d795e16b7e4a7d4feb8778bd73bd7531
Size

30KB
MD5

50d4ba6b156a8e2d1349a90e239f6d02
SHA1

8f0398311dde8f6ef48bec82dc8f642883bc57d5
SHA256

badbfc24dcef1663a71cf19a5d8409c8d795e16b7e4a7d4feb8778bd73bd7531
SHA512

c4ae8469e563d1e21f3685ee17ad9511976b2fafd149613283df50dad97b30fbf0cc9b255d89947b12f39234354000dace1f87d98bdd38d914c3a5f1a1692fc0
SSDEEP

768:CZui5nIdyu85oxyAKVq8AV58JjLZccZ6YpEm:6uinIdh8rAKVDAoJ5d6Zm

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

badbfc24dcef1663a71cf19a5d8409c8d795e16b7e4a7d4feb8778bd73bd7531
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ