aff6c6fe80bc7cc66c182c426d7ce26fb4f2c45a9f5052ed5c5195ea5f99f621

General

Target

aff6c6fe80bc7cc66c182c426d7ce26fb4f2c45a9f5052ed5c5195ea5f99f621
Size

600KB
MD5

f3f29bb54b6c3591b92e1c2ab1fa9b25
SHA1

6fb012839493aee23a10eec2cded82e08714f5bf
SHA256

aff6c6fe80bc7cc66c182c426d7ce26fb4f2c45a9f5052ed5c5195ea5f99f621
SHA512

0558df9e36e711d8ade41c8160ba491b67c1697efabbec6d6f36f294a9bc7247a59e555642631b60b1bab9cf0342d794dd006c5512b3a81274695a4f6c6171a5
SSDEEP

12288:v4Pe18VDbmf2wK59pvzZXYRQ/FWRLl/rfPCpXb3G2pBuMcu:cfmvy9pLmRQFul/DML37

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

aff6c6fe80bc7cc66c182c426d7ce26fb4f2c45a9f5052ed5c5195ea5f99f621
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 4.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 585KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 4.7MB

UPX1 Size: 585KB - Virtual size: 588KB

.rsrc Size: 14KB - Virtual size: 16KB

Headers

File Characteristics

Sections

.text Size: 684KB - Virtual size: 683KB

.itext Size: 3KB - Virtual size: 3KB

.data Size: 13KB - Virtual size: 13KB

.bss Size: - Virtual size: 23KB

.idata Size: 11KB - Virtual size: 11KB

.tls Size: - Virtual size: 52B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 46KB - Virtual size: 45KB

.rsrc Size: 4.5MB - Virtual size: 4.5MB

UPX0
Size: - Virtual size: 4.7MB

UPX1
Size: 585KB - Virtual size: 588KB

.rsrc
Size: 14KB - Virtual size: 16KB

.text
Size: 684KB - Virtual size: 683KB

.itext
Size: 3KB - Virtual size: 3KB

.data
Size: 13KB - Virtual size: 13KB

.bss
Size: - Virtual size: 23KB

.idata
Size: 11KB - Virtual size: 11KB

.tls
Size: - Virtual size: 52B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 46KB - Virtual size: 45KB

.rsrc
Size: 4.5MB - Virtual size: 4.5MB