7fc223ec6484012a2172ce78cdd6253ac4145d52ed69169d7479ee7c953e0f8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fc223ec6484012a2172ce78cdd6253ac4145d52ed69169d7479ee7c953e0f8e
Size

7KB
MD5

1102cd06581d63a46aabbad2d9de6750
SHA1

2e2b395970446eece063f289109d85d9bad7a433
SHA256

7fc223ec6484012a2172ce78cdd6253ac4145d52ed69169d7479ee7c953e0f8e
SHA512

60aeea3236830afd04a24f1091243924b66b5a554483b8c0cfd918f8abe4c4e511a7c2e8dd59fa69e1f2c4b2066d2deb8cf7582ac89baea34a62b99b6930d717
SSDEEP

96:A9zNZmZWWwGfM2hs7eqpLG/6XrnubsvpH4xdIUG3nP+AxTHGE7MUAwYo:ijmcGwLGGEsvpgA+AxTmE7MUAc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7fc223ec6484012a2172ce78cdd6253ac4145d52ed69169d7479ee7c953e0f8e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE