2fd8712086d7b0c4802680f6e093f0732e84b7bcd168c03856d42266b52f520c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fd8712086d7b0c4802680f6e093f0732e84b7bcd168c03856d42266b52f520c
Size

4.6MB
MD5

8b504f494e347281ce3dbc02c2111643
SHA1

0a40d2f8b4a9f9110f85850470cea683ba6869b4
SHA256

2fd8712086d7b0c4802680f6e093f0732e84b7bcd168c03856d42266b52f520c
SHA512

831da70c5e95bf8da196fb47928b08301652b2af49811360010ca7ea83fb4b4c414f7ba7b0b2fd3dede2d202706df91a814befc4c4bddeecbf55a698cc37af87
SSDEEP

98304:lzvlnWigGR5LSmIzqQOFw1cZnrfAQAYZX6VrzCRtR1p2iGx9:5vmGRdSmYvOFvnrj8z61p2iGx9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2fd8712086d7b0c4802680f6e093f0732e84b7bcd168c03856d42266b52f520c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ