d067c6c1fef1abc295ca1c3aaf6225ea5ad01e520bf778b6e88060714786053c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d067c6c1fef1abc295ca1c3aaf6225ea5ad01e520bf778b6e88060714786053c
Size

29KB
MD5

5383acd8312a0b43a00ad06c66572d1d
SHA1

d572a98a5068a41418f952bbb9b705e1bac7d456
SHA256

d067c6c1fef1abc295ca1c3aaf6225ea5ad01e520bf778b6e88060714786053c
SHA512

ca6903ca305c3ec773da8692b8677df8630c2beb41ef6ce8cced93c2f5d7a19bdbb9abffefa87687560990f922c3ce5526d71ddcb0fc01e485bd74850b589181
SSDEEP

768:utc+p3XhfNd2Iu/4pQ6VUM43FKh/P0EK:ubp31C/yQ2U7FKRsEK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d067c6c1fef1abc295ca1c3aaf6225ea5ad01e520bf778b6e88060714786053c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ