6cea8f89df6075d5be19cb4c210b24516db8a95e88a930f0c1fa8ca284a5178e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cea8f89df6075d5be19cb4c210b24516db8a95e88a930f0c1fa8ca284a5178e
Size

1.7MB
MD5

663aab607218161dde681cc0dbc29676
SHA1

9b711f64408960d0e6a8464320362baaca385911
SHA256

6cea8f89df6075d5be19cb4c210b24516db8a95e88a930f0c1fa8ca284a5178e
SHA512

d4e68a8885943c27eec486923aad724a3eccfdd6a3b78d481f43041b7294403ed792a9e0ea905c1d4c92a1fb112c4c00e1cb70acb36caf6e462bd5f5172b8211
SSDEEP

49152:4eFknoK1AxNdXq6qGFvxfHtwOGldgJVThE7HJ6jXjbjARt/PCmNYgp03g:ZWoHxva6tRxfH6OGTgJVThE7H+jbj0t7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6cea8f89df6075d5be19cb4c210b24516db8a95e88a930f0c1fa8ca284a5178e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ