bd44e5bcef9123c9923239c269477aee403b887b90e12f379a9ab692b440b5b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd44e5bcef9123c9923239c269477aee403b887b90e12f379a9ab692b440b5b9
Size

335KB
MD5

7eb25e6468d2e8d6f986cb0a9608f30c
SHA1

5d8dfbed686d69ed2e96d4f583cf01b90c5490ba
SHA256

bd44e5bcef9123c9923239c269477aee403b887b90e12f379a9ab692b440b5b9
SHA512

9c1d5f001dfb0e2158a60944dfa94ff9d2c8f9da599115f051eadb0ad5f6f2a4978f2bf613420f8b265fb4fa9893bfbc25339825a2edfc0b6d453b08d9c6a1a6
SSDEEP

6144:vk5OqrqzmzNEbpE5BDwYve6cPk7/OAO49QnoWBuKF4zVunRyHo10mxG3fQUePhFR:vk5Zrqz8ipE5BDhLcPk7/O48oWBGunRD

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bd44e5bcef9123c9923239c269477aee403b887b90e12f379a9ab692b440b5b9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ