b6b8ca94dc31ce16da065697eefe4d177eca7e35414d70a5548e1b8dd6c29bad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6b8ca94dc31ce16da065697eefe4d177eca7e35414d70a5548e1b8dd6c29bad
Size

139KB
MD5

2e31070a19cb643caed164e1207cd1f5
SHA1

b3e6826e584a0f77b2aadc34625206f828c99932
SHA256

b6b8ca94dc31ce16da065697eefe4d177eca7e35414d70a5548e1b8dd6c29bad
SHA512

a7e5742e9f63dc35aae10f9d17bf3a8736a0f177fd8dffbe677a5ec19e5ddd769999ae4ab676c7a6f580e74c8ac440f3109b363a14df5ec17bd08ac7251f5a1f
SSDEEP

3072:4DAGM8gkEJiLvxHVbaqbcoCdDaBKxqyYklTG7CaoIBwFslS:iAGMzirxxpcFaBpyHYp7wFs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b6b8ca94dc31ce16da065697eefe4d177eca7e35414d70a5548e1b8dd6c29bad
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ