63910b205e9c483ee74b19597d83b1a1084f8b117b54a91fe38111a0efebfa59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63910b205e9c483ee74b19597d83b1a1084f8b117b54a91fe38111a0efebfa59
Size

418KB
MD5

d22dafa09b4d7ee60ea704c5d2ddb54a
SHA1

3c18561b6d42823b545bc841039045940f42bc11
SHA256

63910b205e9c483ee74b19597d83b1a1084f8b117b54a91fe38111a0efebfa59
SHA512

7d7040f1545f1f8a381b88f0a29ff94e616a169d48bb04d57f5f0774ddd61ae8a9f7085e898ebffbebc39bc50631f77e23eafb798043ed06aab03d52bba1de64
SSDEEP

6144:+4RvfLBnJ5+Ojw0S+o1NKqtNNCIxpdOEjNqOTCuNPtEB1Ps7ei0n3kC6sz+GLX/G:+4FjB7TS+OnbNpdOU5Ogm3PjivU+Oji

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

63910b205e9c483ee74b19597d83b1a1084f8b117b54a91fe38111a0efebfa59
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 876KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 375KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 752KB - Virtual size: 750KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ