bf6cb4d80880b2c3d257cc8bd6ee25056d1773c6ba1d7eede23d4c84b336b946 | Triage

Sharing

General

Target

bf6cb4d80880b2c3d257cc8bd6ee25056d1773c6ba1d7eede23d4c84b336b946
Size

483KB
MD5

00c33213b7745cb2a801e1e2ceb6ea4e
SHA1

7c174050d9b08153aedcb549a4b4e6b51c199ff1
SHA256

bf6cb4d80880b2c3d257cc8bd6ee25056d1773c6ba1d7eede23d4c84b336b946
SHA512

7524e554f83303dd6634d5f3ab5bdea629874a9c0ef5ab80b01c11fb92b84eef32780f117506f379f8242fa23b5554e746e8b729b4705ea213c93cdf9de76a29
SSDEEP

12288:Ex2rKuU4iU2zVHa2SZ8mqui/rPPXGu8IVc1c6F:42rKO27mli/LtVic

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bf6cb4d80880b2c3d257cc8bd6ee25056d1773c6ba1d7eede23d4c84b336b946
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 616KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 453KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 624KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ