619d0f514a9091919155285c6c5ce3fed0aed87c64a545f682e238fbafba187b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

619d0f514a9091919155285c6c5ce3fed0aed87c64a545f682e238fbafba187b
Size

102KB
MD5

9f75e02359a267c61d3ae17a3eeb35c6
SHA1

2f1b0dc908d59cf7e4e48b231db5bad6292add4b
SHA256

619d0f514a9091919155285c6c5ce3fed0aed87c64a545f682e238fbafba187b
SHA512

00b667be00a05c138831aca5d235a36c9be93aa9eca9b9d04a19648a2b06a6e444034d8ade8ffd6651be594438926ba46249a074364100e45aca09a22de56bd6
SSDEEP

1536:RomneQHoFfV2Lshae/DqxCxugXtWhiH6rdSxrNDmUE5XqO0kx9i1NfSswe74L3Pc:RDIFdmoG5SxrN64O0u+fSe7E3

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

619d0f514a9091919155285c6c5ce3fed0aed87c64a545f682e238fbafba187b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE