15bd12f7f6dae2377b481a73cc936fef090e202cd58524fa0b74078fd3c6022a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15bd12f7f6dae2377b481a73cc936fef090e202cd58524fa0b74078fd3c6022a
Size

167KB
MD5

8d844da0a5cddfed7e4b695cdfe4e629
SHA1

417007b2b4281ab17cb10badca4d3b1932f62b08
SHA256

15bd12f7f6dae2377b481a73cc936fef090e202cd58524fa0b74078fd3c6022a
SHA512

9a036c2c088be7f554a0ffd7e5ad75f7e5df848364317f344f0fe66a61a56ae0dbfa4f3c6c3f25a97ef86f65caa6178291484aaa2f0b69f1290e08372ab2fc5c
SSDEEP

3072:RGGs9AdPUZQ+aXPAnSA+8FOb9nGdrHdmsaC/BcANahl0AkoovidpC4Gm:RGGzPZXYnSE6ngHSC/B8rdhov

Score

10^/10

upx

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

15bd12f7f6dae2377b481a73cc936fef090e202cd58524fa0b74078fd3c6022a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ