4c9cbbc5e16d61475aec4c3691346f5a100eca43f704e423c035ddae7c2e25f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9cbbc5e16d61475aec4c3691346f5a100eca43f704e423c035ddae7c2e25f1
Size

39KB
MD5

96956a387098f1dacf49d95f9031cb5f
SHA1

ef7dfeb17cb64413a9bcd374f33c9d34f746b768
SHA256

4c9cbbc5e16d61475aec4c3691346f5a100eca43f704e423c035ddae7c2e25f1
SHA512

08b9e17a072e0080578fae31f216124d7167f81d734648b5b749b967d8de8ce84c0629ad9e2c327e79f4bfea000b7ff2f0bc9edd598f522a231e44df2cb3f58e
SSDEEP

768:8wYiKMM/p9WXj/Nv9+V+SGFXmCPuPiQfKEGu38QUCW7ivs:YMMSXpV+VENpGPiYGu38pss

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4c9cbbc5e16d61475aec4c3691346f5a100eca43f704e423c035ddae7c2e25f1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ