c24e02dc998a161ca8ec8088f0d7e81e33e8828918ce99918eec7bba03fba151 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c24e02dc998a161ca8ec8088f0d7e81e33e8828918ce99918eec7bba03fba151
Size

1.9MB
MD5

fb331e5c764439efb9a79440340d1d20
SHA1

9b0ae038b8fafee8775f3ab265e0133132c1fbae
SHA256

c24e02dc998a161ca8ec8088f0d7e81e33e8828918ce99918eec7bba03fba151
SHA512

d62749b53701db4c4d65f08efbb40521ba17e127ad4b3e342b129fa690db06e474995f6e602c3b3f81e5601adafd30ebbf7724a49b417458bc7e035317c2594f
SSDEEP

49152:zPHGS+uyIcQKKuRezlbYZxKYJZi+hhDUEmNvtP0:jdcHKu6bkxbIYUtP0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c24e02dc998a161ca8ec8088f0d7e81e33e8828918ce99918eec7bba03fba151
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 924KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 384KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 704KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ