b66e17bd9c6b7f8a335faa3a830f92898a53c8e979acf059c5367373d7f0eea3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b66e17bd9c6b7f8a335faa3a830f92898a53c8e979acf059c5367373d7f0eea3
Size

134KB
MD5

b291d77274ee77ac6fa090add59b2742
SHA1

13f6ae9553a659cc777b5f38175c9ec5c44b260b
SHA256

b66e17bd9c6b7f8a335faa3a830f92898a53c8e979acf059c5367373d7f0eea3
SHA512

e43d6102ea161dbe3376852175c5b42474d6a3fdf3ddaae558ac656a19362f8c77da2f6d6e678d91ab0585ad4f3c6200d028871b6bb0e6e7622d16fa54e4b9e3
SSDEEP

1536:3Ch0qtAlmaWuPavUViHCj/uR0UEm7V1m29evVAT/CG8drhnouy87:LuuPmUV0JEm229ayT/J8drBout7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b66e17bd9c6b7f8a335faa3a830f92898a53c8e979acf059c5367373d7f0eea3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE