c8ada70f8105bc1f149215587beb0e6c9d994eacc5053678edf002cb6e372284 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8ada70f8105bc1f149215587beb0e6c9d994eacc5053678edf002cb6e372284
Size

95KB
MD5

6d980e7653abeb7f37f5bd1ca4bb5e63
SHA1

ca0e81b24b02d7c1151c29d1cbcc5b44ac47e257
SHA256

c8ada70f8105bc1f149215587beb0e6c9d994eacc5053678edf002cb6e372284
SHA512

f9535f47895b9286681cc00fed5cce0609f7e594c8ef8067aa9727d8a940d7836171b847dc87a019ce53a64bd22194cc940ed7b1b0318fecdabefe9a7076da43
SSDEEP

1536:Sw37pvTUNpHvcIyF2FnpaodBgOjtttctDK6v3da:SwdvTGuFU8on85Pda

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c8ada70f8105bc1f149215587beb0e6c9d994eacc5053678edf002cb6e372284
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ