b01df4214b24d3844fb21509dd10e3dcfa26b75c3b8f64e93a0735b080ebb22e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b01df4214b24d3844fb21509dd10e3dcfa26b75c3b8f64e93a0735b080ebb22e
Size

140KB
MD5

adb8a49399da5a35416c7b851130db3b
SHA1

c7f168b44457fa92058ef0b30e8760dbd95ea77f
SHA256

b01df4214b24d3844fb21509dd10e3dcfa26b75c3b8f64e93a0735b080ebb22e
SHA512

f6f845684dcfb38deb63a686b35d3a93eb61c984c858fe724b80d40d53f12c0ce0f49b296d6b96bea34045282c8ce7f64e9e012ce6c8f516d6f0fcc505c45662
SSDEEP

3072:gZzIQZk9fN8RjurfgV9Zh84I2+T1UZe1Y6Q:gZkykQRjhVSTqZuRQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b01df4214b24d3844fb21509dd10e3dcfa26b75c3b8f64e93a0735b080ebb22e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ