c2401890cf330626b5b325622af00eba98bc611728ae5cfb983e02f0f18ace53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2401890cf330626b5b325622af00eba98bc611728ae5cfb983e02f0f18ace53
Size

376KB
MD5

69237924394aae3c05d44cdf883d1902
SHA1

00dacd2d099e74e3e83077a18daf3e0c6e546def
SHA256

c2401890cf330626b5b325622af00eba98bc611728ae5cfb983e02f0f18ace53
SHA512

04829a119d90c81c9c6f25ba1817f5d19ab7c3b7d5f86d4b3dceaffeba6da7fed57a990ecf594c2b24e29670ec4884a5fe37338c7fbb556b99d45cbde7f891f9
SSDEEP

6144:N91He6e/+FAaSifWE/wweCEdvNMDKtXl1euIdBGRL938RrXnlqO5TaBr6:N91+6e/+FAB0ofxNMDKtX/HIdBGRL93S

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c2401890cf330626b5b325622af00eba98bc611728ae5cfb983e02f0f18ace53
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 362KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ