68a0f95643618bcb2aa56877a3736d47033939ffb3f2211bca53eb87caff46d7 | Triage

Sharing

General

Target

68a0f95643618bcb2aa56877a3736d47033939ffb3f2211bca53eb87caff46d7
Size

515KB
MD5

c8113180d1e1a0d4e47bf9594e0f0794
SHA1

61cb46bf9f2afc3cdfc239b6ca4c1533584e7a06
SHA256

68a0f95643618bcb2aa56877a3736d47033939ffb3f2211bca53eb87caff46d7
SHA512

2736506e291f5073832cb2bc8e27ec7050dd22c5356439a5f2a76f97708f9e328ad92a538aa1363b93b7bcb7370fc858b2cb4ee73dc6764eaff65a33c55914bb
SSDEEP

6144:+IY3nC0vFYTNqoNPOEpJk5bH+duRL89mVJnYSXOGjGILUr5oJz8x3nsalqvJ047k:knC2F8o5bH+dOLiYX36Lmi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

68a0f95643618bcb2aa56877a3736d47033939ffb3f2211bca53eb87caff46d7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 744KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 411KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 576KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ