863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8 | Triage

Sharing

General

Target

863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8
Size

129KB
MD5

9f83d5c240c8c6db23f95babf74f2d88
SHA1

d67a2a40d3620555bf15f7b65d977bb2ee9e385f
SHA256

863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8
SHA512

0ea88d823af91e24030e36d05e1bf347dbd03dcb4b1d81d84caf84b4e8175f16e09d38a7c1d1a20b89c4a0c2c6da6ea7e2473e8b57a16c58b090845ffa8256b1
SSDEEP

3072:KlbFONL/fuQ//IwC29zrLphZTkR81ISXoL5QpmFX7WYRYtPao77bocc9:+BE7WwC29phZ8pR5XOhao89

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

863d1a16e6785da2a6eb4336bc5d39206a177aa70c2ee5d97f96b2be26d43cc8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ