f78d6521c51717532c3d3b3879194ffeba6b799899337d4cb75e96da152d9c9e

General

Target

f78d6521c51717532c3d3b3879194ffeba6b799899337d4cb75e96da152d9c9e
Size

223KB
MD5

161a557b51e19e4bfe40da6403948ecf
SHA1

29e8b89deed5b20d800c481549ce7aab85cfda02
SHA256

f78d6521c51717532c3d3b3879194ffeba6b799899337d4cb75e96da152d9c9e
SHA512

dc8727541d322a911577362a17c3a12cf290cefc240c3a672f1b8a16fc49da15d8bce16b3faf939a61fc7dee64a77370c18f2636c28f8097f626ed44db618c87
SSDEEP

3072:fioGsdEXUDzuOsJGgOq9hw2K2DEbXhbTtdad/A4M5qwjKlYZK08Xelqam5IA:fi3kDzjgpi2J8XRTG0rmlWXielCp

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

f78d6521c51717532c3d3b3879194ffeba6b799899337d4cb75e96da152d9c9e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 191KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 120KB

UPX1 Size: 191KB - Virtual size: 192KB

.rsrc Size: 3KB - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 93KB - Virtual size: 93KB

BSS Size: - Virtual size: 5KB

BSS Size: - Virtual size: 3KB

.rdata Size: 8KB - Virtual size: 8KB

.tls Size: - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 4KB

.data Size: 127KB - Virtual size: 127KB

.rsrc Size: 26KB - Virtual size: 26KB

.text Size: - Virtual size: 4KB

.text Size: - Virtual size: 1.2MB

UPX0
Size: - Virtual size: 120KB

UPX1
Size: 191KB - Virtual size: 192KB

.rsrc
Size: 3KB - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 93KB

BSS
Size: - Virtual size: 5KB

BSS
Size: - Virtual size: 3KB

.rdata
Size: 8KB - Virtual size: 8KB

.tls
Size: - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 4KB

.data
Size: 127KB - Virtual size: 127KB

.rsrc
Size: 26KB - Virtual size: 26KB

.text
Size: - Virtual size: 4KB

.text
Size: - Virtual size: 1.2MB