b158f3e3efcab8a6556be47c5391d53d31016740cd898da7710edb13b29e54a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b158f3e3efcab8a6556be47c5391d53d31016740cd898da7710edb13b29e54a0
Size

834KB
MD5

bc6074c51a2511a2e4a168bd1c0883e8
SHA1

63e88fe496487c0d576f9e5588e273ae603cb19d
SHA256

b158f3e3efcab8a6556be47c5391d53d31016740cd898da7710edb13b29e54a0
SHA512

db3da923c86e50cda3058ca59a980832c1bb5e1db597309b3a322efd85594d05e1bd6c219fc5033c26a7a6f768f246743acdf624d7d6c730cf10c05ffda55e18
SSDEEP

12288:sn3323cSrD1eLvlkW+CEvi0nFnL++ZYgUZ5XO+ShQ74CxZF1oi1wOupq0A3n3vDv:sH+cIpElvEqOtYTvXL8OKMc5IycVs+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b158f3e3efcab8a6556be47c5391d53d31016740cd898da7710edb13b29e54a0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ