fbe260680f56b905b258467ab2e1bbdda7a0e7c9a4096812c69e3b5f11ea38e6 | Triage

Sharing

General

Target

fbe260680f56b905b258467ab2e1bbdda7a0e7c9a4096812c69e3b5f11ea38e6
Size

105KB
MD5

21f80b8f4abc8d25f741fe5e3e5f0503
SHA1

95af5b8f00527993b49a8e16d0be6bc8d57e065d
SHA256

fbe260680f56b905b258467ab2e1bbdda7a0e7c9a4096812c69e3b5f11ea38e6
SHA512

ad550bf39180bfeb20afbc305456ad1828a6d95573fb52e8b8d39d917ca18fb589ff958c5433b9e780082c50d799b2e5701ace6aebadc872401d5054ba7b1db9
SSDEEP

3072:iM2BBqG1LnBR568PHGewvv7x+ZlS1sNVrd+/O:iFRLnB5Cl6lS14k2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fbe260680f56b905b258467ab2e1bbdda7a0e7c9a4096812c69e3b5f11ea38e6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 224KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ