ff8d879299eb22234603c4be4cbdba83f6c83a53d61668d5c884e9ad43df5c5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff8d879299eb22234603c4be4cbdba83f6c83a53d61668d5c884e9ad43df5c5e
Size

200KB
MD5

a6e9ffbcb7166c7aa82ef13a050665d2
SHA1

9af7f464930d4b1c415946817b637260fd78585a
SHA256

ff8d879299eb22234603c4be4cbdba83f6c83a53d61668d5c884e9ad43df5c5e
SHA512

a9d4d6d1ec14b0eb983602a49fe18a9ba8a47960bc9a8ee62c6ec09100921bb9e58fb5795c1205079b05b164037ba17cd3eaa149dfd8661083a88e1bc1680d97
SSDEEP

6144:mVYwpEYkb00xGYrdbz3t0v4oHOqA3HY19m/4:m6wpEQYJPiQoHOqWHU9Q4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ff8d879299eb22234603c4be4cbdba83f6c83a53d61668d5c884e9ad43df5c5e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 191KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ