b8b0bd47dc0316eaa19d0b5e1cad2a16fada30f132489037b71051abe7c2db56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8b0bd47dc0316eaa19d0b5e1cad2a16fada30f132489037b71051abe7c2db56
Size

3.9MB
MD5

943219eaf107f778b7bc55e04c098350
SHA1

76d27f3e70d8b62e43e857bcd2a198b161ada6ce
SHA256

b8b0bd47dc0316eaa19d0b5e1cad2a16fada30f132489037b71051abe7c2db56
SHA512

2518d032e652ea4be47b5e029f7b1caa3928ce0407422f919f3e2013c7f89600dc7a0db6e8b55e44745f5e4ea99ed266972f91f6581d6aa6148fda60b041b548
SSDEEP

98304:/JHkaexPIZtX3pFiyktHSXbEkxi3MqqEN8z7F56Mu:Rg6ZzsiNQ3MqKz7i

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b8b0bd47dc0316eaa19d0b5e1cad2a16fada30f132489037b71051abe7c2db56
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ