be214b4f7f776bfaf4256c4c587c8f3e1a696227db39b5bbb75f1baf749f9d3b | Triage

Sharing

General

Target

be214b4f7f776bfaf4256c4c587c8f3e1a696227db39b5bbb75f1baf749f9d3b
Size

29KB
MD5

b3a4549c14f359374368aefe01c9f1de
SHA1

b36137ab87e0c9a1785d18f3740e8c04f4a5e4dd
SHA256

be214b4f7f776bfaf4256c4c587c8f3e1a696227db39b5bbb75f1baf749f9d3b
SHA512

327ef8fa2a0a19621c50d14074cf246ef6462c4e3551f37f513f74865a76908bfadcd8ebf617432246a2ece6a4e05d2b99955177d7778550cb62b0a61736c0fb
SSDEEP

768:7ZFlUMrs2Ht8LPH3otaTJFo7LDc+LAfh7RC14J:7ZFDrht8LYtqzo7vc+LAp7Aq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

be214b4f7f776bfaf4256c4c587c8f3e1a696227db39b5bbb75f1baf749f9d3b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE