4c4a5996cc4bc0ee6e100de9da0867ff9bc7f337700365fb17e0a530da30ad03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c4a5996cc4bc0ee6e100de9da0867ff9bc7f337700365fb17e0a530da30ad03
Size

133KB
MD5

00843f85f86e477c8edb253530d57386
SHA1

8d7c81d2222c4ec84b2aea56fffcfd31898cfc88
SHA256

4c4a5996cc4bc0ee6e100de9da0867ff9bc7f337700365fb17e0a530da30ad03
SHA512

cebe64c90f864200e4d68acf0a56a29dceb90a91dc14ac79199177e01372367b7ad3a9a694270f8b6a4a403ef8ad296ad5527f9db1addc6eec209966ebb6a131
SSDEEP

3072:bjhA9Ip47mqL3PGxFjzAQAmLxeSolD9/ralnm5F0bQHJhQxs7:bFA9K47tL3+TjUGteUlnm5FaKf

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4c4a5996cc4bc0ee6e100de9da0867ff9bc7f337700365fb17e0a530da30ad03
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 324KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 131KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 111KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 141KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE