b008c3ebad1211e3405f33ed74d0e4a7f24b1b274f1ec856ca96cfd1a5ae047d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b008c3ebad1211e3405f33ed74d0e4a7f24b1b274f1ec856ca96cfd1a5ae047d
Size

16KB
MD5

26f79d1dd6e287259bd5e363d21008e3
SHA1

7597faf814561a0accc0435ad6b3efd3ce06a234
SHA256

b008c3ebad1211e3405f33ed74d0e4a7f24b1b274f1ec856ca96cfd1a5ae047d
SHA512

379e8403a116aee6305bd47eb88113c2752fa7bfe2569da3ac0bbac6643bc5ea9cf1b0583e6e38d46dd491de6f005160243f253e83d238a3e6c80a60b3fa83a7
SSDEEP

384:171X9tnH7Eb78nLh0M9087qyhsUgFLXce4teuwyv3Z3:1BteP8nTh+2sUgF7ce4teunZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b008c3ebad1211e3405f33ed74d0e4a7f24b1b274f1ec856ca96cfd1a5ae047d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ