b8b1e7ed4daa17b2c64ef5dd67b73caf3942fd0e3421bb6a317fe6f2d96908e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8b1e7ed4daa17b2c64ef5dd67b73caf3942fd0e3421bb6a317fe6f2d96908e2
Size

36KB
MD5

96186d57c85418e3bacedfd7f2836139
SHA1

e54cbef3446ecdaefd08ee1166fdf6a7ce716e86
SHA256

b8b1e7ed4daa17b2c64ef5dd67b73caf3942fd0e3421bb6a317fe6f2d96908e2
SHA512

875b465f1ab5e74ef98ba5c49494109069d654ea2be050bda99f83ea1e1b1f4ca3f54ac665fc1e36aa3f5ba4ff9d6b6db6f9b0cfa3f5f27b86e87c0d04bd887b
SSDEEP

768:Yz3b0CbHhEzki0aYYeTz08QLQbW2ACIBbzJijTwguRg:Y7BbHIOY1FL2UlzJiwVRg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b8b1e7ed4daa17b2c64ef5dd67b73caf3942fd0e3421bb6a317fe6f2d96908e2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ