7c72d61378a3f7c6664ce3c830a15c60da10f3cc46df5119a6f7e4f297081672 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c72d61378a3f7c6664ce3c830a15c60da10f3cc46df5119a6f7e4f297081672
Size

2.6MB
MD5

fb20b6540f47e0dd13805257ccd06a95
SHA1

5411a3d508e3b3e43d8cf9af73c820b0da0375cf
SHA256

7c72d61378a3f7c6664ce3c830a15c60da10f3cc46df5119a6f7e4f297081672
SHA512

f838cab5e94a97d9e03d5768f64e799b23bc63b7bdfdaa3e3ae7d13421de7e57605c669f7864b3edd05e4b4089344fe1b8fd5a174db61005649cd112634b9b21
SSDEEP

49152:6ooduCDpooYs+pgzwOvw8xqdLve4DVdyDIf4nw3Vx3PPGEg7zS2LO:6HuCDKoYs+OxyLW4jyDIf4e3nKW2LO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7c72d61378a3f7c6664ce3c830a15c60da10f3cc46df5119a6f7e4f297081672
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 528KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1012KB - Virtual size: 1012KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ