d25fa60af37fbda3d95c655f05670c65f0494c72602dafc6fe79fd48da04c4c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d25fa60af37fbda3d95c655f05670c65f0494c72602dafc6fe79fd48da04c4c7
Size

402KB
MD5

7863ceb949ff6062dbf489d685b66979
SHA1

8062f9d2956c0975f067299c84ce958fa21e19b9
SHA256

d25fa60af37fbda3d95c655f05670c65f0494c72602dafc6fe79fd48da04c4c7
SHA512

bc307596128583b14d0c0d5698db7e8c652f36660d5214f9a6a0aa9aa957f1f23278fb515a2474681d020a1f606dc48df99cbf8f93c6735c4454ad5da909bcfe
SSDEEP

6144:L6AaKWS4yagxWzFvWgW3poLTqqgZZWCxAKmPl2sxgl5t2/H5bAxH6EjWZZA1ABAa:O5K7agqWBd92otAZkxH6WWZkABAa

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d25fa60af37fbda3d95c655f05670c65f0494c72602dafc6fe79fd48da04c4c7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ