ff38cc8506baf64fff8b5070ca7d5472bd8abb9b8a71fcfe0fd8d8c028743161 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff38cc8506baf64fff8b5070ca7d5472bd8abb9b8a71fcfe0fd8d8c028743161
Size

466KB
MD5

f94eb3f9f684976634ecf356bb54f9ac
SHA1

8f5326403314fe12749f7fee76ff62387bb5c449
SHA256

ff38cc8506baf64fff8b5070ca7d5472bd8abb9b8a71fcfe0fd8d8c028743161
SHA512

b7408bbc65f5d0868c910602c9d72e15dc9853b4a03f836c4c654d151e71c2e0c7f4d29f6454a7ec8c19f4737ad8161535ac89a347d2ca939840d1a9ec057a69
SSDEEP

6144:HjM6rYzNQG9sJacm4SGBwWj0KSXCjIR5/9NVeGF/DFs25lwCxg/P+/wj53eOXN7M:JgL9Ea3WBUlVeGF3wsgHdj5HfJMKrOH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ff38cc8506baf64fff8b5070ca7d5472bd8abb9b8a71fcfe0fd8d8c028743161
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 461KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 616KB - Virtual size: 614KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ