963fb6c80732d083f28275b8e8bbb1a9a2a9bf414cb10665784d90973eae70e2 | Triage

Sharing

General

Target

963fb6c80732d083f28275b8e8bbb1a9a2a9bf414cb10665784d90973eae70e2
Size

484KB
MD5

2ff4510e7cbc92bb8a9eafa53fea3c37
SHA1

dc37ac89ca4745a05e861d9e5618873e8d6ec106
SHA256

963fb6c80732d083f28275b8e8bbb1a9a2a9bf414cb10665784d90973eae70e2
SHA512

ea3af182da9d6598c07965b46a09b25fa205ed49aa6c9745c68aefbe943bc1ccd35e6b38866294e3795b0138b68e0107a4fb43b8d7d91c9f5abf8f8042a8ee81
SSDEEP

12288:6Vlx2lXi3KrTVpwFZLzjszXCAL86s7fYvw++p:6YFi3KrgFZjs+ALMjY7+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

963fb6c80732d083f28275b8e8bbb1a9a2a9bf414cb10665784d90973eae70e2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 816KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ