11f0baa67cd791667ac6fb36abadaacb89beb1f21b1f5de32809d0a8d16accf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f0baa67cd791667ac6fb36abadaacb89beb1f21b1f5de32809d0a8d16accf5
Size

1.8MB
MD5

4ebcf8d3cc085d08303a739f9585cd24
SHA1

f95fd6dd139bea1e59cf71081a6e3f2488a622b4
SHA256

11f0baa67cd791667ac6fb36abadaacb89beb1f21b1f5de32809d0a8d16accf5
SHA512

436aa21a3bace16167c14d20c13c3be86813ee18f41ecfa65e05080cfec7f090c7c39d696f101501a65de3fdfc00de99b0c553a2c855eebdce4eec421c30a186
SSDEEP

49152:qiUbeTxn6Gb9eZ5T4Lo1l1UVsgUyp3fZbqNkGOKT95+ePK6ycK4:qiPTx629eZ5T9H15mpx2OoxC63K4

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

11f0baa67cd791667ac6fb36abadaacb89beb1f21b1f5de32809d0a8d16accf5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 740KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 516KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 860KB - Virtual size: 858KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ