b1615db66877f58206a96e104adbb71ecbc2ad7002b8e9914398a02430f6a5c9 | Triage

Sharing

General

Target

b1615db66877f58206a96e104adbb71ecbc2ad7002b8e9914398a02430f6a5c9
Size

1.1MB
MD5

71c360c308db6824265ebad3e9f85afc
SHA1

e1a5e6191024465f14eb37a4724d0242fb35eb7f
SHA256

b1615db66877f58206a96e104adbb71ecbc2ad7002b8e9914398a02430f6a5c9
SHA512

d8846958364aa976545919e74aad1c0fbd6a26981fb5c15ec45a1b104b508fddb938509da024a2774f82a66d23920f427bdf199c55c72e4d228624c291d49f37
SSDEEP

24576:EOxCqy+aSYk86UiPRKhaeIaY2Te63Er93XcSMbh9/ZS:/xCTl886UvmTWe6U53Xcf/ZS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b1615db66877f58206a96e104adbb71ecbc2ad7002b8e9914398a02430f6a5c9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 947KB - Virtual size: 948KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ