upx_dec[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

upx_dec.exe
Size

6KB
MD5

ff80c49796ca46ed023072a1c2a48624
SHA1

1752e7e72ba43ebf12ba1fb6997d8fe8d907ae59
SHA256

8ed502a788ab5ae0993d1295632393803888221bbd92980b251699bada25353d
SHA512

d453f32b85b99511540940230ce38ee862e1610a47b5f170e6b0218732323004f4d677dab2ae97b39136f0150d5486cab0a458ce7f8d7c85bf9da6407b7d90e9
SSDEEP

96:yR0WStb4X8WEwd5julciH3de/0KJ4r7t1llfKRqzX7:xWKW8CKF3dULJ4ftdCsz7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

upx_dec.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE