ba17ea4757a2d3c257c7dd889a5edcd86a0bd4392310bf2fd1486f9ffdc667af | Triage

Sharing

General

Target

ba17ea4757a2d3c257c7dd889a5edcd86a0bd4392310bf2fd1486f9ffdc667af
Size

67KB
MD5

51d14f3fabb33d8becc7f87d080d03ef
SHA1

b7e22e9262ef1cda272723d11aad9026f6437822
SHA256

ba17ea4757a2d3c257c7dd889a5edcd86a0bd4392310bf2fd1486f9ffdc667af
SHA512

2f1f17bb1f734ea9961be867e714759dd8dab844475cc703d727354403a55766ef62490c0aff12fff80367ff4d67041032a05be133871cf285ad7cd04701679d
SSDEEP

1536:7hriDnHI3mTiQbgNqtn0l4xVNHOmSqLtAIfD8ogK:7Wck3bqc0l4jN1LtAIfIogK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ba17ea4757a2d3c257c7dd889a5edcd86a0bd4392310bf2fd1486f9ffdc667af
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ