749c2d6b4181bc884bccf1dfc7f47597725626779577bd9c16c7e0ed8166d49f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

749c2d6b4181bc884bccf1dfc7f47597725626779577bd9c16c7e0ed8166d49f
Size

20KB
MD5

97505af3c657632a003d363403593c22
SHA1

e0e34a8d073ad53e2b98d93f83b68987f79f234e
SHA256

749c2d6b4181bc884bccf1dfc7f47597725626779577bd9c16c7e0ed8166d49f
SHA512

13646b94e3c61dd96d3f979359ad9f98d3ce2b2cc050187c837c456f896c98e700ce63d083b52e98e875bf16173edc0c2c389ef8ce48d07e700bbc200f3137b4
SSDEEP

384:wzhMPP4o211vIXQmSrlZjdn3ntSTpxwRpVD/YGr8I28U23FcU:8hqPy11v5mW7jdnXtpLVD/YGw78/3GU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

749c2d6b4181bc884bccf1dfc7f47597725626779577bd9c16c7e0ed8166d49f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ