ca8231da0299b273e4f15b38a547f63ad7730885df7387df1034da300311900f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca8231da0299b273e4f15b38a547f63ad7730885df7387df1034da300311900f
Size

176KB
MD5

a6f611b33ea2b00d144afca8cd5daebf
SHA1

88ca4bb9a04672df751f1177fb5f26e5a711d0b6
SHA256

ca8231da0299b273e4f15b38a547f63ad7730885df7387df1034da300311900f
SHA512

56e7604c0c0346077c9bd333ef2654e60b26c732657a872b862f11f0a99fad9bfec3eec11263c82b1ba5977e1600ff0a2ded3e0a398eec0a12165db95ce6a28e
SSDEEP

3072:rXZ68slz05VFRDmm+7EWF2Q4Rm3gfcAzEBJYFLnAB0oQFkeTD9A981CMIlq:zZbt5VFRDmmGt34Rm3gsJYFLkReD9A9I

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ca8231da0299b273e4f15b38a547f63ad7730885df7387df1034da300311900f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ