d37fd51570182d562aa14982d5aed561c2639baf1006cbc8ebb85838d7ab60cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d37fd51570182d562aa14982d5aed561c2639baf1006cbc8ebb85838d7ab60cf
Size

246KB
MD5

07c2fef2e59ad47bf100e530286d93b0
SHA1

cf704ae739cc3c7a83c71631f385f9adb19e3842
SHA256

d37fd51570182d562aa14982d5aed561c2639baf1006cbc8ebb85838d7ab60cf
SHA512

53d44badb6089e41f1a698c155e8bdf3f3a8f02fa0f2974cc99a7772b47b278bd499b28fc2d4455cdffca1a59166abf39c116f826447b2dbaa4a9102db947e44
SSDEEP

6144:tKlYIOET56Y0SnP+ULpoQiTy4qCGJPmDy+E9wsu+ciaT9SCPDkK:tEYgTYY0SP+ULpoxTFq31qyP9wsuVBSi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d37fd51570182d562aa14982d5aed561c2639baf1006cbc8ebb85838d7ab60cf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 236KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ