c6c3f15ef9114c31f2b60fc251508b32e8d1af29ccfba746d1f083c8182de511 | Triage

Sharing

General

Target

c6c3f15ef9114c31f2b60fc251508b32e8d1af29ccfba746d1f083c8182de511
Size

9KB
MD5

2f3a81814849ef24e2ccdf2fd2f70b92
SHA1

2c599567a71270ed5aec1aad782814004ce55dac
SHA256

c6c3f15ef9114c31f2b60fc251508b32e8d1af29ccfba746d1f083c8182de511
SHA512

3ca734eef03352420444004986ebabb27845446bec38045cd21e5d8029762ba7d96f01c936095d07c9c5826457c896146452e83a6ebcdf80a0d6abb32494f5c5
SSDEEP

192:/TBuTdT/VivTknPDsdZIiiMgUupsuzstZ29MZe7zytWX03Dw5:/TBE/VivgnPAd6Op2cOzaw0Dw5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c6c3f15ef9114c31f2b60fc251508b32e8d1af29ccfba746d1f083c8182de511
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ