61015ed0f63bfb9cd5c3d4efe1d8c556[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61015ed0f63bfb9cd5c3d4efe1d8c556.exe
Size

68KB
MD5

61015ed0f63bfb9cd5c3d4efe1d8c556
SHA1

29e4719c13193411d63c341c01ae9c8c411809b0
SHA256

0447aefa83c6c7f285e2e788085809a06a95899ee57457bea699969f27e360a2
SHA512

b329d9c286a6e0506a74584b22d6ef7d8d821fd4bde298b131cb0f29f006432ea8f2566f6a911d6b0eeafa2eb00254d95ff1c6b8f9486462a5e4c5a2a3a15afc
SSDEEP

1536:czlIebPoTS3E1yshOD03E1yshODruI41rWmEnZlQMe0RB:czv3E1yshOY3E1yshOJ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

61015ed0f63bfb9cd5c3d4efe1d8c556.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ