b8f445a49fe9c458cf17a6899dab0c3457917873bd4dde202ad7c11a817d1ddd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8f445a49fe9c458cf17a6899dab0c3457917873bd4dde202ad7c11a817d1ddd
Size

33KB
MD5

803acce9a7a06a1145170367d43f87bb
SHA1

6c8d910a8d208b23cb6443326b76fea56959376b
SHA256

b8f445a49fe9c458cf17a6899dab0c3457917873bd4dde202ad7c11a817d1ddd
SHA512

38f845c073d8ca4247eac0f020aa08ae1dd988f801f27bf5f7157f43f5a02b8b538e569870aa8bb65917df61736562ed2c550565b61d3b86bdef2e2b702daf25
SSDEEP

768:UEzNbLcQ9qQuVriDMuyuruTD0qB77777J77c77c77c7nOTcdadGEZrM:l3h9qQA6hZunrB77777J77c77c77c7Oe

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b8f445a49fe9c458cf17a6899dab0c3457917873bd4dde202ad7c11a817d1ddd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ