818d3e4a2d731a42912329876b44ebcb00b50a1f4e12a562210db0825d09a707 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

818d3e4a2d731a42912329876b44ebcb00b50a1f4e12a562210db0825d09a707
Size

1.2MB
MD5

c2427055bbb2f5482028f99d5baa7e8c
SHA1

cabc8401c8e45a79829439d73ae94a5ffcc38e24
SHA256

818d3e4a2d731a42912329876b44ebcb00b50a1f4e12a562210db0825d09a707
SHA512

4bac008457322bf705cf1a331a7b6340c2c9084c60c533f171ef2780eb3868a51a16e1b96cf80f3d46cbe4a97f720849775878e63051abd39a183425eef2de8a
SSDEEP

24576:Q2MoNx4AWT1Upk0cEq9wrsqa1dBnEc8sHuViWoLVO+gnPb1YJS/jP2xL:soNxaipk5qM+YLVO+sNs

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

818d3e4a2d731a42912329876b44ebcb00b50a1f4e12a562210db0825d09a707
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 500KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ