f8c5eb6b1c754e84d75168b962d7090ac01e65998b46dd653c07c6152d26b8de | Triage

Sharing

General

Target

f8c5eb6b1c754e84d75168b962d7090ac01e65998b46dd653c07c6152d26b8de
Size

644KB
MD5

fcc784825b013206ab446f563bd52e5e
SHA1

e1e2456a1b2b6f4d6c061a1c3d1bd0f954c69089
SHA256

f8c5eb6b1c754e84d75168b962d7090ac01e65998b46dd653c07c6152d26b8de
SHA512

ee53f3ff06eeac46eab7b8adec6aca5342e832b718d0ff07aedbca1a5a4376a72677b08c046a5052eede6c847184aa7bfb7e7660116b1e3ea9b118e5b9dfa708
SSDEEP

12288:nsaY8rpexuJmqlb17Qk0Um0x/lqWYBI19T5tKBIbEGCEo0V8op2q98xVVDL1:B/rpehqldY2h1PjCEF8BqcVxp

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f8c5eb6b1c754e84d75168b962d7090ac01e65998b46dd653c07c6152d26b8de
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ