6c44ffe12da93ce7e0c01b2f87ac97a295b2856501d33ad2619c907403efac9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c44ffe12da93ce7e0c01b2f87ac97a295b2856501d33ad2619c907403efac9c
Size

35KB
MD5

7cf0e213eb903a9b8159db1be0435760
SHA1

1def8a3155ed06fde8c7c69e3bf1468382801a85
SHA256

6c44ffe12da93ce7e0c01b2f87ac97a295b2856501d33ad2619c907403efac9c
SHA512

b06e42c4091796043b233d8365459d6b45870f0e90090ac1e314462a771cb76d024117881c349b46d08220e8acfc7f313782de88f72db43da250a94b28e8e6e5
SSDEEP

768:6ZPGhZIpPwuJ43Kd7Uhjh1mdEcYPzQloOD7w/EX344524444/M:6ZOhZIJw9g7Uh8dElYoO4CN6M

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6c44ffe12da93ce7e0c01b2f87ac97a295b2856501d33ad2619c907403efac9c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ