cb9289c09874939240a9972789cb5c029571d4eb5a2fc3c485c3b9d378526113 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb9289c09874939240a9972789cb5c029571d4eb5a2fc3c485c3b9d378526113
Size

673KB
MD5

67a00d3db42f81db6c2967c89aa76590
SHA1

f84f8a6c67e66e0f59c9f1a1a7156a31a7637170
SHA256

cb9289c09874939240a9972789cb5c029571d4eb5a2fc3c485c3b9d378526113
SHA512

275f83e3fc282fad80b62c1007b6d09a11d3f00f099269ac32256a30bbd47dac5e63980470e69b1d66ea82fe486c455b66a9c82f19c09efd7b5b16a0cc73a101
SSDEEP

6144:5uHO7HrG1VVE+I5E2EBE2EZ/UOPSe570Szp3bE2Ew6kulO5JXgTTSjT:gO7LuVMyOB0vw6HTE

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cb9289c09874939240a9972789cb5c029571d4eb5a2fc3c485c3b9d378526113
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ