b18af9f417264b5f10957dd367cbe192c3e413cd6ffff2cc51162b13f66acf92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b18af9f417264b5f10957dd367cbe192c3e413cd6ffff2cc51162b13f66acf92
Size

26KB
MD5

41e17669c8131c862cae1a7e6c7a6d62
SHA1

417b93f9060fa649f67ef0da5b1155595b4b5d36
SHA256

b18af9f417264b5f10957dd367cbe192c3e413cd6ffff2cc51162b13f66acf92
SHA512

636df436fbf34f5e7e1875c2f39ca64459a2a9e20ff704d7e50f526e987904450cdc8e7dfa017fdc0bb4c1dd6ee3cc665635b1ff2d1771b5d3b490cc39c7f59a
SSDEEP

768:8MrDCTkIx2h44+IFULVhTFm+jgA3tNI/LKDSj:3PCAIxfIivFmG13tNZuj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b18af9f417264b5f10957dd367cbe192c3e413cd6ffff2cc51162b13f66acf92
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ