591282ce0cc44316c9bf5bc4e1fd5e14f24b43068e6f24d78191bb3893742060 | Triage

Sharing

General

Target

591282ce0cc44316c9bf5bc4e1fd5e14f24b43068e6f24d78191bb3893742060
Size

726KB
MD5

0d534a0376b811650a376c4a9a925810
SHA1

1321d5992c45ab166bc4dcfa95b50e23bb091c7d
SHA256

591282ce0cc44316c9bf5bc4e1fd5e14f24b43068e6f24d78191bb3893742060
SHA512

270d261d7d28806b258607690c53156fe03ad44ae19b0ecb6246e55544b9c6206a1564ff48a5ed54beb2e2ccf2636e00f23c6120de56f1ce6f024e6c3db5a461
SSDEEP

12288:WGxihuMhJ94w6qD8a4/HvE+rl48cz5Y93ON7BvjdMMf4rv4JLxm2Q+tLOIl3ge:W0iAMJV6qYa648cNL7BvhMMf4rv4JLAW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

591282ce0cc44316c9bf5bc4e1fd5e14f24b43068e6f24d78191bb3893742060
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ