c7ba6eafc963ac7fc32f4448ea2ee270147d8efb1d92b741b0e2bb070535f65f | Triage

Sharing

General

Target

c7ba6eafc963ac7fc32f4448ea2ee270147d8efb1d92b741b0e2bb070535f65f
Size

67KB
MD5

69cf37f94f60954095db700ecd98652b
SHA1

88fc657a1b06d4c028d1fc1a46db1ef5a3e5161c
SHA256

c7ba6eafc963ac7fc32f4448ea2ee270147d8efb1d92b741b0e2bb070535f65f
SHA512

bc82d30376e171ffe63075efbde119d42ecbb97668c058cbbc6ff1780ff3b62305670584c74f709e06cd9be4bf44c292d9888966d6459fb8edc9bd0ddcfcaca1
SSDEEP

1536:saqnNzHCL1tB6+nHjkzUUMhbaiB9gki322hzn9y0kPWmIgCCzqZpqFNp:sgPsOgz6zEA2hg01Czq/qR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c7ba6eafc963ac7fc32f4448ea2ee270147d8efb1d92b741b0e2bb070535f65f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE