f1e82f725523d0e86c767123249249f31324b3aae10ca566b361895aeffc56ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1e82f725523d0e86c767123249249f31324b3aae10ca566b361895aeffc56ac
Size

1.0MB
MD5

b03ddd131ef67aa01517c4a59bdaf3d5
SHA1

de69da1978cbae8e445e1c7818a184bdd9e51dda
SHA256

f1e82f725523d0e86c767123249249f31324b3aae10ca566b361895aeffc56ac
SHA512

e1c5010ff8a078c5b836e0a65327932668e479e68dd73f2d90da4e504e70ac488cca9207fd8a812236a73f55cc490c56f815f0e6bd28dd2875c18a0336eea143
SSDEEP

24576:GGPVi+t54GXPyGBebZjJbhojz1ay0rU0c+lPY:HI+tHXebrh4KB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f1e82f725523d0e86c767123249249f31324b3aae10ca566b361895aeffc56ac
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 58KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE