b7abd81194c62745be129c2da7abdf6d8ee6574e9e9c37d7511bdd45df0ccc17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7abd81194c62745be129c2da7abdf6d8ee6574e9e9c37d7511bdd45df0ccc17
Size

87KB
MD5

659878d1e62733b97203e997c3cd922f
SHA1

dd897931936f82c04056f6c49ecadae5ea231ccd
SHA256

b7abd81194c62745be129c2da7abdf6d8ee6574e9e9c37d7511bdd45df0ccc17
SHA512

36d3b0d81bf8f3e36e7bdeb6a41460d300b3a171395604e31bf04f8d562b002905d747e384481842c1dc8419342664aefe6b705a2a08cb47dad0ef34c6a50e0a
SSDEEP

1536:Po3mleoqXCco/9U7TtG/cZzpjlHJMXa/G3ZPYHgL7aIZy9ydup+8NftrR9:PoNoqyco/9ohG/u9/Gpw9IZy9yItNZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b7abd81194c62745be129c2da7abdf6d8ee6574e9e9c37d7511bdd45df0ccc17
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ