91cbe610c36d41ab2ac2d434317b067ef9e9970b5073be0ef07a8537918d85e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91cbe610c36d41ab2ac2d434317b067ef9e9970b5073be0ef07a8537918d85e8
Size

23KB
MD5

24574d0895e324c862ef92c72f5ec9d4
SHA1

521cf15d5c468ba7b8ee7695e4d4634713d47c6a
SHA256

91cbe610c36d41ab2ac2d434317b067ef9e9970b5073be0ef07a8537918d85e8
SHA512

82b9fdb5b820620cff539acf7b0721a2cbf59b4cafb97d38b11feb8487c507ed0e280ca9c2aeeaa81611ae52f0fc9e14a2abe658b8e19829c451995fae11f949
SSDEEP

384:2dAEHsQLcRty8Ff50Gb6nO8ExrHFRodr1eGhrLPNV2BQIEDOjd+H2bil+8YUFR:DHQLD8FaGuO80RSd0urLPXte+WbiEX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

91cbe610c36d41ab2ac2d434317b067ef9e9970b5073be0ef07a8537918d85e8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE