c880f29adc95de916cdcf4d9fc72e75b771fd4abef423626d0fdcb708ad89b2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c880f29adc95de916cdcf4d9fc72e75b771fd4abef423626d0fdcb708ad89b2e
Size

237KB
MD5

6d8315e726144554ff5530fc989a5320
SHA1

7b5adad832b864637ca607aac8d809c39c63329e
SHA256

c880f29adc95de916cdcf4d9fc72e75b771fd4abef423626d0fdcb708ad89b2e
SHA512

dc285f682852fcc5e0568216b8b04ce6976d7ce5ca725b43957025cb218c33d60a8ccf65fc01380269339a3ec0a4cf5e0c57d747875bbe22a38acb844478548a
SSDEEP

3072:vPzyXANQX729D4G/aR3DsCNTF0NZkDZg/n/+es8MXkxq7X0Cv+s:vPnar29D4d6CNWNZk4n/ds8M04rV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c880f29adc95de916cdcf4d9fc72e75b771fd4abef423626d0fdcb708ad89b2e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 264KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ