d087ec341769d412e667788499d0f53d4eba3e7e22ea0400da8fb15cc555d4b5 | Triage

Sharing

General

Target

d087ec341769d412e667788499d0f53d4eba3e7e22ea0400da8fb15cc555d4b5
Size

649KB
MD5

4553ffb4ee28b774d0722cd8626a4ee2
SHA1

9a02c8e43f774ee30277cb59f7c397c607f98901
SHA256

d087ec341769d412e667788499d0f53d4eba3e7e22ea0400da8fb15cc555d4b5
SHA512

87bb5151a83ad1792de2b6d4551b0199ad7a159decfb0b00b06906036d03d7f6146bd73857efc65fe8ab6ba244d5cdd332703d0a1281ab36e533676ed7a2c1e1
SSDEEP

12288:IFx/B2CS7ELRdMaI/zUqNHrIcA+8WgyC4WZriNrN6w2Byz9qjoVdNQxa:IFfu7E7rVyMn+9TC4WZriNYw2ByhqjS7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d087ec341769d412e667788499d0f53d4eba3e7e22ea0400da8fb15cc555d4b5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 980KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 552KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 816KB - Virtual size: 815KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ