d4fc50ab01641918eb73435c02f7c567947df92dffbcf55c2836b790e57c94da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4fc50ab01641918eb73435c02f7c567947df92dffbcf55c2836b790e57c94da
Size

380KB
MD5

893b17ca0e94433706a5a5028de382ab
SHA1

1e6d6638130b1001c5af925b9063b948f921a4ee
SHA256

d4fc50ab01641918eb73435c02f7c567947df92dffbcf55c2836b790e57c94da
SHA512

6c9af78a4481abe33c5c2fc45151b40deab958331d6bc5d37d6c2c182d3e0cc0dfd092e6f7245c93b84558cb2add8a4b9100fd6906f16d47fe9c0eb82c4fe91c
SSDEEP

3072:pZzIQZk9fN8RjurfgV93CbNa0Xc+7F56Lb1YmyXHq5ILXx:pZkykQRjhVINBc+7T6Lb1YmCn9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d4fc50ab01641918eb73435c02f7c567947df92dffbcf55c2836b790e57c94da
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ