ced700270a9538558db5cfd926024179d302cd88f094a29d2b7fbf30bd0e30a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ced700270a9538558db5cfd926024179d302cd88f094a29d2b7fbf30bd0e30a9
Size

56KB
MD5

69ba4d172d3ef2fc206a4d944ef95d00
SHA1

35c9bdc6a6f9750bf5fd88132a9f97d9bb8eeddf
SHA256

ced700270a9538558db5cfd926024179d302cd88f094a29d2b7fbf30bd0e30a9
SHA512

a6c9d7267a388f554e51e1d3b3e5bd3f0b2582b81fe4e7ee766aebe44285b6ef365ea0502b0083453ccb16f9e7df670f32f4bfd5fa81dde011fee79f2183608c
SSDEEP

1536:SNqaLV8a6nyOnnLWJwO3nFrMKoTy26L4f:SNqMYyaLWJh3nF5vu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ced700270a9538558db5cfd926024179d302cd88f094a29d2b7fbf30bd0e30a9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ