8521c782ad3fce1fd82dee21ab38d4a36530bc07e8984b5560798f7b33b327aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8521c782ad3fce1fd82dee21ab38d4a36530bc07e8984b5560798f7b33b327aa
Size

21.1MB
MD5

6800808906205ef111f2ca0fcfbd3345
SHA1

85a18175b529a62e42f8af5a4e14cfd9059aab96
SHA256

8521c782ad3fce1fd82dee21ab38d4a36530bc07e8984b5560798f7b33b327aa
SHA512

c12433efad09e34608f683e294b6fd67b1e536f759e99930d4b1de3fd1dbfa4ef4b46ca71f54ece593ec78312e371b089cc79c03e871be4f1964ca971816720d
SSDEEP

393216:Yb983/J8rbU+VRbgMr4cyqXmVWG35L2ZXbPWabTo8/DxmDyzc96r633XtQP:YZO+tVRgMUxcmVFwZrPWabxD163nk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8521c782ad3fce1fd82dee21ab38d4a36530bc07e8984b5560798f7b33b327aa
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ