d118817be532ecbb8156a0d73d8a98594aba1bb30ffe1910133939c53ba325c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d118817be532ecbb8156a0d73d8a98594aba1bb30ffe1910133939c53ba325c3
Size

69KB
MD5

228ff34ae90a4b0e5282d958f418c7e2
SHA1

21b5b8bd7061c631fb9096ccd228e5d207d7736c
SHA256

d118817be532ecbb8156a0d73d8a98594aba1bb30ffe1910133939c53ba325c3
SHA512

1160b3426eb6738068d39ca58ac54dbc3d197ec1229697e57ea749087162cc83607e57e06ad4902c04fc59a19d19c4995861a52d26b5a4218d262cdd5cbf3783
SSDEEP

1536:bsAGZDfUGOMziHbQUJPokTtlDgLEGEeR7QZXvfZ76D:bnWDfJDybQUJgkRRPvfI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d118817be532ecbb8156a0d73d8a98594aba1bb30ffe1910133939c53ba325c3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ