be63d5c51d0c0cfce69a3d66b29b84e875f9d03322ed5988e1c4fa84f0aeb0fa | Triage

Sharing

General

Target

be63d5c51d0c0cfce69a3d66b29b84e875f9d03322ed5988e1c4fa84f0aeb0fa
Size

171KB
MD5

ec9750c2ecb0ea6d81a3b8981d2dfd42
SHA1

13436320c3cfded878069c041afd6cd29fe4408b
SHA256

be63d5c51d0c0cfce69a3d66b29b84e875f9d03322ed5988e1c4fa84f0aeb0fa
SHA512

2ccf49622ab0c090b12df0edf5621da1a5dd457ad365b7de9b3e048e1b2da9fdc1e44c642d6ea278c2997b8f3c220cb518f266841563d34b24856f1b2135add8
SSDEEP

3072:riwwnni1i3r5At8MVbME9xgZVo5fEw0sjFrbExHmUk77lqaR/QgJxGO5555555um:uBnGibFMNZ3FcbsOHmUG5hhkA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

be63d5c51d0c0cfce69a3d66b29b84e875f9d03322ed5988e1c4fa84f0aeb0fa
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 392KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 532KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ