2975aefef80841fbde21757a5e4ea74a58df8d2d0c3a38f27b05cbfc9cf0271d | Triage

Sharing

General

Target

2975aefef80841fbde21757a5e4ea74a58df8d2d0c3a38f27b05cbfc9cf0271d
Size

112KB
MD5

016f2fe59994f8c4b2f0aeab44bd0350
SHA1

3bd4e1a72e98dab743d61ab8e4380397b5a9dfc2
SHA256

2975aefef80841fbde21757a5e4ea74a58df8d2d0c3a38f27b05cbfc9cf0271d
SHA512

35bb9c989b5904f49de86197e2119f27ff2eb3ab1a90877263c6b28b05d9a5cdcff6f4c2ec18bc3d483d839976322c7e409aa7289853010bb4e40a8351bab371
SSDEEP

1536:KVvIAHRXFf6q/aHrljN4wErQIElkb0lsNyPG2tELv+mmFx39gA7Lnt38A/uHWH0Z:lAHzSTLK03lWMijuxtRntMAS1zI4HZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2975aefef80841fbde21757a5e4ea74a58df8d2d0c3a38f27b05cbfc9cf0271d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ