b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2
Size

12KB
MD5

0318a9119b5d008d4d82091607758120
SHA1

7a1d16059acaddaa51f799602cb7752e6294a6ce
SHA256

b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2
SHA512

ce21b6f7311b2c38255f2165fa1bdfd8a70902bd89396e25a14325acc15f434d847bcc079c94504aac835223f763f2094acdfbc34086edfcdc422c1f84d522f9
SSDEEP

192:KvH/QqNB9ES84KFAGddLMq/xGIXoruJGK1ojdvY8Zk2654hIvslrCnfE37R7:oHb39h8VdeawK1ojPZkz5j7nfs7R7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b2895d49c30b69d920b9bace10dac5578dc68bc0a47bf82c179138ccfaf3dcd2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ