7c66ab3e4c28693052f8a77890ad265b0505299403996c69fb8ea5c8f530f88a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c66ab3e4c28693052f8a77890ad265b0505299403996c69fb8ea5c8f530f88a
Size

32KB
MD5

07ddca18f632527f48742983d98bbc7e
SHA1

3a7974127cb40db202b7fd9f1f944946e18646b3
SHA256

7c66ab3e4c28693052f8a77890ad265b0505299403996c69fb8ea5c8f530f88a
SHA512

68ddc5986d1f10ff842887c9d999b93e8ba55aa05d242b57eec4b1694d0aab8afa098394ac997c1ba8ac3a7194151d0bbec5c3ce9ffb45c7632daae03a4a2ed8
SSDEEP

768:wvRhjgVs0XFzz9EdW3zQDXxGcL1+oR7Jsz/+IXOPzUbJX3LHGcpT:wvRhgVsI32SMXtRNaXOPzUbJLLpT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7c66ab3e4c28693052f8a77890ad265b0505299403996c69fb8ea5c8f530f88a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ