41bf7b9661737431db7359ce7ebf5673304680720960a6b0a4859c2ed2738554 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41bf7b9661737431db7359ce7ebf5673304680720960a6b0a4859c2ed2738554
Size

386KB
MD5

811e7c1d06636e17104a2d91ce7b336d
SHA1

ee513571c0facf2f8ab5e571537565b85a8f1161
SHA256

41bf7b9661737431db7359ce7ebf5673304680720960a6b0a4859c2ed2738554
SHA512

a8600fe66c8362d4aa51df0d18075faa866d6746cc4b2260fc613b214b0940c5573b9ca10839da184f0a6cc47b4ad6c9a67f62d3cbd2f86ff15e7bd006844d50
SSDEEP

12288:UN1Mpgq/juI+mFQK+KUWm57hz5vJM80TPL:U/9qru5iOFhzkzL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

41bf7b9661737431db7359ce7ebf5673304680720960a6b0a4859c2ed2738554
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 816KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ