cc83cb570a6deb7135600ba0e30de9e49b1549963245cc4b262925ddf1889573 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc83cb570a6deb7135600ba0e30de9e49b1549963245cc4b262925ddf1889573
Size

56KB
MD5

334ce56b490b316d23268766b48278d6
SHA1

8e6fe2ae004af91eade91fe6a9c59a0ead51795e
SHA256

cc83cb570a6deb7135600ba0e30de9e49b1549963245cc4b262925ddf1889573
SHA512

c78572e4e34503d8eee493e6c7d7646578f93a7e3a02785a2576f099268c3716fca80930275427dea2002d625485b5b799252b377373d8cab24c58b3c9de08b3
SSDEEP

1536:4g4qMNx2sMMrYkX9DVPg16dqTuM4rq78R3+:452PM8ktDq4YuT+78l+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cc83cb570a6deb7135600ba0e30de9e49b1549963245cc4b262925ddf1889573
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE