1cf4a52bd3b9078376c588282ddd39f4a060fc1b719f766a6b1946c21f1e9acf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cf4a52bd3b9078376c588282ddd39f4a060fc1b719f766a6b1946c21f1e9acf
Size

313KB
MD5

630ef832159b331b2a6d62d4804eb650
SHA1

dbc5d6fc8b0536827c54e585b129cb04ef6b80f4
SHA256

1cf4a52bd3b9078376c588282ddd39f4a060fc1b719f766a6b1946c21f1e9acf
SHA512

1b5b4d4fc6fb1d085d34eb1f6e5d64ac96aad0cfeaafbedad1deeb3d296c6de039ad95fbd7159a9575c55c987d110fc223f4c806a6d859a1b1b142006609642e
SSDEEP

6144:6vc6rBCDbBU04tlpyhgHcWuLRB5xl+ZjghO5LrKQW/dRn9i:6iDbBU0OpyhgHcWulB5z+XxW/w

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1cf4a52bd3b9078376c588282ddd39f4a060fc1b719f766a6b1946c21f1e9acf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ