659e314e4976363223c430fcc97c0654e3517a74b43b2964b7d87325f0e440a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659e314e4976363223c430fcc97c0654e3517a74b43b2964b7d87325f0e440a3
Size

427KB
MD5

962f7bddeedcb475136c5173e5710132
SHA1

7a11abff182f8c2387f8739efbb4e1792414c5e8
SHA256

659e314e4976363223c430fcc97c0654e3517a74b43b2964b7d87325f0e440a3
SHA512

0ad0310bcefb994d4a27eb598566279aea44a113a5a892416de47d119e2f41b888cc612470bf2abb2ba88f38e48acfef9ea61907e0244f42aff43f7bea55c39c
SSDEEP

6144:Z1PJVdJ8r5KeovUmtQLVC8OJWUJiumYlNR5UR3Hgq+xij3uJuMvlx6mnxYu:7Pfn8rQbUmeMJiuJWNgq+xwuIMWu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

659e314e4976363223c430fcc97c0654e3517a74b43b2964b7d87325f0e440a3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 600KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 395KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ