0a68cf8ba69634b1947beff8459a3e100b8244d1b82a69aaeded6d77e2f78229

General

Target

0a68cf8ba69634b1947beff8459a3e100b8244d1b82a69aaeded6d77e2f78229
Size

8.5MB
MD5

75032ec6fc183cd80008b1cd4799e7dc
SHA1

677acdd40fea4f3e5f4052fe24430bd0551d2cdf
SHA256

0a68cf8ba69634b1947beff8459a3e100b8244d1b82a69aaeded6d77e2f78229
SHA512

647972dc39ec58e0c601daf30b149708fbec4badac5bcb3ace76564009543d86af49b991484cff9081bfae78adb7aa6612b7350f69283db00c67818bf20a60ac
SSDEEP

196608:2ToXCaW026sqEZtLUONqNhMcRYG8B/KFCRLvY:YoXg02EOTMNh1PSUH

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

0a68cf8ba69634b1947beff8459a3e100b8244d1b82a69aaeded6d77e2f78229
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8.5MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 973KB - Virtual size: 973KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$%T@WREF
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$%T@WREF
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$%T@WREF
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 2.9MB

UPX1 Size: 8.5MB - Virtual size: 8.5MB

UPX2 Size: 512B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 973KB - Virtual size: 973KB

.rdata Size: 201KB - Virtual size: 200KB

.data Size: 60KB - Virtual size: 67KB

.pdata Size: 14KB - Virtual size: 13KB

_RDATA Size: 512B - Virtual size: 244B

$%T@WREF Size: 4.7MB - Virtual size: 4.7MB

$%T@WREF Size: 2KB - Virtual size: 1KB

$%T@WREF Size: 5.3MB - Virtual size: 5.3MB

UPX0
Size: - Virtual size: 2.9MB

UPX1
Size: 8.5MB - Virtual size: 8.5MB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 973KB - Virtual size: 973KB

.rdata
Size: 201KB - Virtual size: 200KB

.data
Size: 60KB - Virtual size: 67KB

.pdata
Size: 14KB - Virtual size: 13KB

_RDATA
Size: 512B - Virtual size: 244B

$%T@WREF
Size: 4.7MB - Virtual size: 4.7MB

$%T@WREF
Size: 2KB - Virtual size: 1KB

$%T@WREF
Size: 5.3MB - Virtual size: 5.3MB