1fef8d27008cf5986ed73f1538e971a9a85e37220f063360ceeff4d52a0f3149 | Triage

Sharing

General

Target

1fef8d27008cf5986ed73f1538e971a9a85e37220f063360ceeff4d52a0f3149
Size

41.5MB
MD5

367ce634766aaaccbb6d33e41a3e6823
SHA1

d0c2f4836ff1ef8a389647ced6b1d304a8b35546
SHA256

1fef8d27008cf5986ed73f1538e971a9a85e37220f063360ceeff4d52a0f3149
SHA512

8b4de8683d97dc13e8cf748f62c14244534bd6f69161746654ed5c499ea36c9635dbf96f428b40b58d2382b84228bbe52c09d7ecd99276dee2abaedc676197b3
SSDEEP

393216:8u+FoOClSmLSrVf4X/1JWtvG9YG2xOoG8n:8u+FlClyVwtWvMY/Y

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1fef8d27008cf5986ed73f1538e971a9a85e37220f063360ceeff4d52a0f3149
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ