67c8a4e2aa458f26c6923d59c6f713790ac8d95ce512a82efb0e1e85232d1ef6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67c8a4e2aa458f26c6923d59c6f713790ac8d95ce512a82efb0e1e85232d1ef6
Size

252KB
MD5

25a028035c457502af3269d7a88e778a
SHA1

436fcfcacc0b4e970d3b70cd6257bc60363e8353
SHA256

67c8a4e2aa458f26c6923d59c6f713790ac8d95ce512a82efb0e1e85232d1ef6
SHA512

9fdf76de81f9e2844add4f8ac9a625e2bb4cbb2088a2456b566902cdcb834c67465517401ced2a327ce76f8243076664c00fba864ef6ff9eba91871fbaed88a5
SSDEEP

6144:nIQjSM10zTYw84EwbITF/NQk+e5dMmU/NoKP:jjSM1YYPJGIHOe5dMlNd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

67c8a4e2aa458f26c6923d59c6f713790ac8d95ce512a82efb0e1e85232d1ef6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ