b157f43459f11eea80206191ff25abb617d111344e24fb58c460d86f2034aefc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b157f43459f11eea80206191ff25abb617d111344e24fb58c460d86f2034aefc
Size

91KB
MD5

072a4edb80f2a0ccc81c048050a22437
SHA1

1accbbefc11e1dab3f29a807e9bab687dd843355
SHA256

b157f43459f11eea80206191ff25abb617d111344e24fb58c460d86f2034aefc
SHA512

d4773c40bcc7922c297128ee938f39f0850ef32d6275fbea41af6cf04e7661e9752d73b1ce7c5bcef0802b4a1a2b21e26d015591bf8bf1d17af00886e179e627
SSDEEP

1536:yQMSqnWhAcZWS4Krn0X3YVhfWo+4vwDtdRM9oG52dHJ57TIUhipS7ZyKK5weNZYY:7MPWhhr7Vhe4w706/dTIKipy7CwO5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b157f43459f11eea80206191ff25abb617d111344e24fb58c460d86f2034aefc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ