fdb5b4f80605bf9d791c69fab685da48a3008a9b83b8fa0528887a7ea13c244c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdb5b4f80605bf9d791c69fab685da48a3008a9b83b8fa0528887a7ea13c244c
Size

462KB
MD5

90e7992231b7642e13ae9b1776bde110
SHA1

0abf8abacdb662aea0c38276f0bf7da6f8964758
SHA256

fdb5b4f80605bf9d791c69fab685da48a3008a9b83b8fa0528887a7ea13c244c
SHA512

050ea9f9e83ed63f2e2ae765343a845311185b55828ced10f31fc3830fc600b5f3454abb31e9a3a9c95a6d52bbe5ea557b1e350305233f3ecab939c789025739
SSDEEP

12288:I10o7apWTcrtUdtQsYnfNJsEMfU2DQ6GGKfd60yQ1br:a7K+LdiNJsEMzlGGokQ1b

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fdb5b4f80605bf9d791c69fab685da48a3008a9b83b8fa0528887a7ea13c244c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 860KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 456KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ