6d7323e5ab05b75aff60068b3e7840649ca68df05293621d1f67d83afc36ca27 | Triage

Sharing

General

Target

6d7323e5ab05b75aff60068b3e7840649ca68df05293621d1f67d83afc36ca27
Size

439KB
MD5

1a6800f129021a4ea2f1b371ac028f74
SHA1

ad52520c2dff57645ec93d99aba5a5dd0f12e43c
SHA256

6d7323e5ab05b75aff60068b3e7840649ca68df05293621d1f67d83afc36ca27
SHA512

81a8e48ee299f05e1f0312b1ed3335e3c8edb6236cd5fccb1cb67f2a394621949b1c30741d7f6c8c676288872a8fb0541cf85d5895d07483553d1c437be1203a
SSDEEP

6144:gBsiCr48KuF/6O9M5S7PgNKbYySI+Gp+v+eW0bamg7Lyr:Ysd48FF5d45gc+v0br2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6d7323e5ab05b75aff60068b3e7840649ca68df05293621d1f67d83afc36ca27
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE