bf04308407570d6bb6d7611bcf44019a9a28a55342a656fec303a6542bd2c7fd | Triage

Sharing

General

Target

bf04308407570d6bb6d7611bcf44019a9a28a55342a656fec303a6542bd2c7fd
Size

1.2MB
MD5

0eca884f8760775800d016adb7785645
SHA1

2472e76ee4c15b27fc97b0507add1b9d9968806d
SHA256

bf04308407570d6bb6d7611bcf44019a9a28a55342a656fec303a6542bd2c7fd
SHA512

f7c65fcf78387c10bd9507bcc9c25591e80525ce65ed4c43f6d9016b1b915a7be034078bb6b7649b32ee6abc7cbcdfcda4c3b4bd339c085ea7dda8a04a9013b9
SSDEEP

24576:r5ysMZ5LsLLgSL2iZqFaxhv3zQKg0uPxH/fQZk:rGZhsL9QKzRgPxH/fQZk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bf04308407570d6bb6d7611bcf44019a9a28a55342a656fec303a6542bd2c7fd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 432KB - Virtual size: 432KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ultra
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ