c99c9cb1ab0b92954d9600dc87a7e1228cb9406fcdf5027b7f78f8e9b335725e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c99c9cb1ab0b92954d9600dc87a7e1228cb9406fcdf5027b7f78f8e9b335725e
Size

26KB
MD5

7a82b1a42ce044b18be1148bcca56a81
SHA1

32d588eb3245f8b43f0766c7301cd62fa19e96db
SHA256

c99c9cb1ab0b92954d9600dc87a7e1228cb9406fcdf5027b7f78f8e9b335725e
SHA512

f64db3b78edfb9a7b38964f61bec3e0914ada198fbb8c7596f4b6a57bfdf9af91ce962e9599432b27448c3d925a1e9b6e344192375ca53f0ec659d3c2fb19406
SSDEEP

384:/Ta04yM0mv7Ay5/6u1+2VXAnPPkyTgv8c4y7I/yNPSoiYYordp9hOGr37:/8f8mN1Skyf+IE6cdpWG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c99c9cb1ab0b92954d9600dc87a7e1228cb9406fcdf5027b7f78f8e9b335725e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ