1c1c53b0af3f52e8d0e015061c789fc1fb38106a3ec9dde0494086bc326bcac1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c1c53b0af3f52e8d0e015061c789fc1fb38106a3ec9dde0494086bc326bcac1
Size

722KB
MD5

0a0499ab83d30a75e0fc4b763983a62c
SHA1

d59236cba9c4fa1ae796037ebe09d2035e25165e
SHA256

1c1c53b0af3f52e8d0e015061c789fc1fb38106a3ec9dde0494086bc326bcac1
SHA512

84f322f1289a2ee33ce66803e95737363ea1264470597bdc9d1c70117217fa2bfa5ed9b8d9995614cba000bf607d4a4b81d09c32b701a0e6ef360ba57dcd0f4c
SSDEEP

12288:CAsQRau1hGihV5mF248xY2Ve9ADTkxW50UJq98pQhEb23NsM2eWHoIka6VrwTz:PsQcOxV55tDTkxg0UJUi3sT29HoQ6ef

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1c1c53b0af3f52e8d0e015061c789fc1fb38106a3ec9dde0494086bc326bcac1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 652KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 596KB - Virtual size: 593KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ