bcf058ace58238c1e62e733d0f2020b23dd24eb02a4bf4dbe6f76b77d1f0e73d | Triage

Sharing

General

Target

bcf058ace58238c1e62e733d0f2020b23dd24eb02a4bf4dbe6f76b77d1f0e73d
Size

32KB
MD5

9fef356de1b1acd2b18313c1b417dcab
SHA1

7101b96b96b3a47166fae75f071e5d624188987a
SHA256

bcf058ace58238c1e62e733d0f2020b23dd24eb02a4bf4dbe6f76b77d1f0e73d
SHA512

0df6e13747731454cfc94ae54d1d75ac3cf9bb77b1ccb8cebe9c99b70f3f45dd74222ec0177277bd91d556402f6b64dcf675feec59d06792b14f42711bfd9f28
SSDEEP

768:pUjPQRHHmvTZft5oXtTG6e4Zyh3nmU6H0GpTE1:pUjPinmb9ETG6X0x6Hvd4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bcf058ace58238c1e62e733d0f2020b23dd24eb02a4bf4dbe6f76b77d1f0e73d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ