bcb296a614ef4ca7e3220b6ee6c57dc5bec33fb220c741c8f7fa31cc97f3ef4e | Triage

Sharing

General

Target

bcb296a614ef4ca7e3220b6ee6c57dc5bec33fb220c741c8f7fa31cc97f3ef4e
Size

20KB
MD5

4ad96c1c4dd72810772520368b2c4fa8
SHA1

6ec60a6686640ba089dee34368a5c3edeff19d93
SHA256

bcb296a614ef4ca7e3220b6ee6c57dc5bec33fb220c741c8f7fa31cc97f3ef4e
SHA512

dce5148eb4dca72755f4115a3bd5aee9bc0f4621cf5f36a21b2b736de4d299f69eea440d9feb99b4df63ce80f0ef7b477e23bf60c73531890dd03447c184f8d9
SSDEEP

384:d6hhOSpB5p/Ds6HEBJH79NeKPi+PvYqiLHrroGszJlU/sr7:d6/O8BD/Ia65TPi+ZCHsYkr7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bcb296a614ef4ca7e3220b6ee6c57dc5bec33fb220c741c8f7fa31cc97f3ef4e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ