219bac619a9b6b0e0988cf1283f408f65477a0cd780c1cd9f97c3cacc4d3b353

General

Target

219bac619a9b6b0e0988cf1283f408f65477a0cd780c1cd9f97c3cacc4d3b353
Size

1.7MB
MD5

d79cea048b4146a118fc025a64bc1ab7
SHA1

197fb73e2bfd0629ccf4de31ec9fc960a616236f
SHA256

219bac619a9b6b0e0988cf1283f408f65477a0cd780c1cd9f97c3cacc4d3b353
SHA512

fab2bb9a642cd3baeefe59fd9c78d791b45a39f75ab8f9a32cb6682bfa48da3f58edc29b0d742122c843a0035768c001488757b713592b146b90b9ff9f824dc7
SSDEEP

49152:qK4o+QKcVFuFFee3jJAOYy6fWOjeK7svug9ulAeJ5n/Y:qurFeP3juThp7sv59ulHdQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

219bac619a9b6b0e0988cf1283f408f65477a0cd780c1cd9f97c3cacc4d3b353
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 974KB - Virtual size: 974KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jtyghrfs
Size: 491KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

jtyghrfs
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jtyghrfs
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.4MB

UPX1 Size: 1.6MB - Virtual size: 1.6MB

.rsrc Size: 79KB - Virtual size: 80KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 974KB - Virtual size: 974KB

.rdata Size: 197KB - Virtual size: 197KB

.data Size: 60KB - Virtual size: 67KB

.pdata Size: 14KB - Virtual size: 13KB

_RDATA Size: 512B - Virtual size: 244B

jtyghrfs Size: 491KB - Virtual size: 490KB

jtyghrfs Size: 2KB - Virtual size: 1KB

jtyghrfs Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 113KB - Virtual size: 113KB

UPX0
Size: - Virtual size: 1.4MB

UPX1
Size: 1.6MB - Virtual size: 1.6MB

.rsrc
Size: 79KB - Virtual size: 80KB

.text
Size: 974KB - Virtual size: 974KB

.rdata
Size: 197KB - Virtual size: 197KB

.data
Size: 60KB - Virtual size: 67KB

.pdata
Size: 14KB - Virtual size: 13KB

_RDATA
Size: 512B - Virtual size: 244B

jtyghrfs
Size: 491KB - Virtual size: 490KB

jtyghrfs
Size: 2KB - Virtual size: 1KB

jtyghrfs
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 113KB - Virtual size: 113KB