c933dc1dffe5cfbc138cb70eaf3632d2989cabd4613f4fb4f1f57034aef6247d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c933dc1dffe5cfbc138cb70eaf3632d2989cabd4613f4fb4f1f57034aef6247d
Size

338KB
MD5

53d2793d6f9aa53440371735c5b11aa0
SHA1

1cdc298c7e95ae7be93552508908961e39200dd4
SHA256

c933dc1dffe5cfbc138cb70eaf3632d2989cabd4613f4fb4f1f57034aef6247d
SHA512

b99df4293fb6c5f5d85ec3e05b0ff4fccb8950ee5952b270b94b5c48520a7047afb0e97d49e23e48fb2f48b01638f584920ba9729aa53f2cb97c5d82de9f0817
SSDEEP

6144:3RAgmiZ0BG3T8lpR7bM0HBKkZsnKrogOPxey8OrN2ITNpHP:3Ggt068RPhxGnKro1xey8OrN2I/HP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c933dc1dffe5cfbc138cb70eaf3632d2989cabd4613f4fb4f1f57034aef6247d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 404KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 220KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.�UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE