b0c72bb24fa6d61dfd2c2569bbcebdf2885ee109947162ee78c97b4e97866513 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0c72bb24fa6d61dfd2c2569bbcebdf2885ee109947162ee78c97b4e97866513
Size

490KB
MD5

0ef8d9830e57b99457bd81e0d6d1c314
SHA1

56428906caecf80def1b14dae9195fd9615ae3d3
SHA256

b0c72bb24fa6d61dfd2c2569bbcebdf2885ee109947162ee78c97b4e97866513
SHA512

2f2a59ec2ada687b65e485098a71732beb9380f82dc684e20bf12c7b3ba55fb8b168765702509124c014d94edbeae4d822d4595dda44f0e3c6502b0a85d28e4a
SSDEEP

12288:rUpjq/QUHx0ik3baUc8+kT6+B1E5H3mQbZnt8qUNVJfW:CuTRXkmT6tmm4nt8qeJfW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b0c72bb24fa6d61dfd2c2569bbcebdf2885ee109947162ee78c97b4e97866513
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 439KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 572KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 908KB - Virtual size: 904KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ