c510617922846505d5d8a308f7ef044746c0165ff3a29b33f01277c8b440a5b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c510617922846505d5d8a308f7ef044746c0165ff3a29b33f01277c8b440a5b5
Size

640KB
MD5

40234cafafc19781479f89de6a760ad5
SHA1

d2778bc28c7b18338718cf3a7c8df0a3ac3d9464
SHA256

c510617922846505d5d8a308f7ef044746c0165ff3a29b33f01277c8b440a5b5
SHA512

85ba3c90071eb551e158bd2e932e7133b124f6b59805ce9a595666d048efa26197cbb5c639baeaf55abba460993b55e400bfe77646b220096f823f812d4c17d9
SSDEEP

12288:jnNhuBoY8SorxgmA+nlvVlSHe8eurD+L+uYy5Y3h8yvj49SPAdA:jPatCg7EPJuX+scYbM9bO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c510617922846505d5d8a308f7ef044746c0165ff3a29b33f01277c8b440a5b5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 504KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SUPX1
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE