dcb169b4d3b75ff5233e4734dce1481bb584c1a6ce54dba0e48276b42cc48c6a | Triage

Sharing

General

Target

dcb169b4d3b75ff5233e4734dce1481bb584c1a6ce54dba0e48276b42cc48c6a
Size

168KB
MD5

b0301c4efc3c4125fe840e1fd13c1052
SHA1

2f0911cd300fcd01e7031a3d8bb07a096d3b09cf
SHA256

dcb169b4d3b75ff5233e4734dce1481bb584c1a6ce54dba0e48276b42cc48c6a
SHA512

3bf3769a3342db032d0679c0f604ffbc69d5915faf440f21cd43412212b0d4c04a768c9825ed88d815b49cad29ec6c8ab90bd45d1819a6ffadf35380b2b352c8
SSDEEP

3072:1HuEwR712EBM6FzCSYTWj5Yw7j68tX76KcuBe:1HuXRZdBMaYTOYc68B2B

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

dcb169b4d3b75ff5233e4734dce1481bb584c1a6ce54dba0e48276b42cc48c6a
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 84KB - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE