d55fcdc7b18bec216a27b9b520488d1f8741c4e95f526fd3febe0a0abb7bc0ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d55fcdc7b18bec216a27b9b520488d1f8741c4e95f526fd3febe0a0abb7bc0ed
Size

37KB
MD5

c43ca952c853e01f701719b13eaa361f
SHA1

da25b781a8d491107c44404ff6b33bdd36dcd4a9
SHA256

d55fcdc7b18bec216a27b9b520488d1f8741c4e95f526fd3febe0a0abb7bc0ed
SHA512

15cfcf7919452783ac9fb01cd933b37c2a33b83593f7018ab4dc8c4995dee8f65f791d2d084bbdddc04ae62edecb20b2f2af93c14cdd08900b4a88c13a5fb547
SSDEEP

768:Xjgnd0y9Fti+OBvw/FfTa5/jk+M7W3GglWJy39L+NI/mQyb:Xjgd0uTOB0tatjkR6WglWJGlu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d55fcdc7b18bec216a27b9b520488d1f8741c4e95f526fd3febe0a0abb7bc0ed
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE