d15eccfed1d26373934e8c7cc8423d52cdb3752d06d8509f7231d9ad6a72cce5 | Triage

Sharing

General

Target

d15eccfed1d26373934e8c7cc8423d52cdb3752d06d8509f7231d9ad6a72cce5
Size

62KB
MD5

2c73970210dccc1e60f3b1a829e36950
SHA1

c6eecc0f590bdec7a5592055a56cb8fe06d73eba
SHA256

d15eccfed1d26373934e8c7cc8423d52cdb3752d06d8509f7231d9ad6a72cce5
SHA512

6a2de770a3c6078e73894d2c0e04e25b9d0eaaae45c6ed3ba7c3e6b94749d944ef79ed3a7203624ae80e0333c947b2c5ecbb49f2443d975cf76089fd2b817857
SSDEEP

1536:TIFA7IqfY6Y9+jLyWkyos5ylGAn9V/o696AskmMYp9r7v7f:MGI+XyWZos5ylGA9ZYAsksp9Hb

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d15eccfed1d26373934e8c7cc8423d52cdb3752d06d8509f7231d9ad6a72cce5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX3
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.peco
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklstb
Size: 576B - Virtual size: 575B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE