6bfee8b122948be646b59032a678f423fece2c7a5dcf133b40e7ce60455c94ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bfee8b122948be646b59032a678f423fece2c7a5dcf133b40e7ce60455c94ff
Size

2.4MB
MD5

a1ea0d2564b21ca1f639d6b1ad9d9d4d
SHA1

6ff14834c624dab5f957fa17d2ccd4659380d4ad
SHA256

6bfee8b122948be646b59032a678f423fece2c7a5dcf133b40e7ce60455c94ff
SHA512

bf3b638fe2f4d960c4dc5abcda5668eeab2d15f43779b4d26d5ba854197ec90c478e7f4e95ed040cb342d200366762f157192a2170eb895f3be8c4a7776563d6
SSDEEP

49152:els8DIpEM8SR2ysTUtGFLKjenPUh4bIbxVhuh/Z6L+xJ/oafo:eZSHsTUAKj4UhJ7Auyf2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6bfee8b122948be646b59032a678f423fece2c7a5dcf133b40e7ce60455c94ff
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ