b8b04a4c8e0bb7bfe568b221cb334b8026258f9dcfce579623637ea49c8cc545 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8b04a4c8e0bb7bfe568b221cb334b8026258f9dcfce579623637ea49c8cc545
Size

4KB
MD5

6f08782e023e084d1986a5495a5724ad
SHA1

82178162e1adc38d94db83b6e979162b831bd919
SHA256

b8b04a4c8e0bb7bfe568b221cb334b8026258f9dcfce579623637ea49c8cc545
SHA512

c6170633264179daf04632d5083e46661c51a892580b177553cd1f20f44043288198680d1a20acaf4b94f6e8d2f5c2400ddcf92ca5240b94186834faff5bc46b
SSDEEP

48:abzyT3rHaUGIGV9ef9D/j5Fw7Ij60tDi9b+XUKt0VVmgvN6gUSykqQbXSeJY8JTk:yI3rHaUM49DLXwOxpAvNdyTQb1Rcv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b8b04a4c8e0bb7bfe568b221cb334b8026258f9dcfce579623637ea49c8cc545
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE