2cc27c1723a98ee66c753fadbd8373671629015e1ae05567018d5cefdf198ffb | Triage

Sharing

General

Target

2cc27c1723a98ee66c753fadbd8373671629015e1ae05567018d5cefdf198ffb
Size

347KB
MD5

01eb7a4addc2fffe3acd8fead1d92670
SHA1

e73e48247f95b76c6cd094d3f4c56d4718fa59db
SHA256

2cc27c1723a98ee66c753fadbd8373671629015e1ae05567018d5cefdf198ffb
SHA512

1073a603574e095fedc421f467068c8789a893a5c53236bfa81acccd3a2b75f64bc8ff7f88b64ab721c8a008f0547d2ac9c7e82eafb63de20e6b22d5501853b7
SSDEEP

6144:ZNjrqFTBCmKV2+TpPl4jCj8P5l3FDF7+TVVfCDMy92uyzNI1yoSj4DLeX:ZNjroTEmKRFlOiYlVZKTyMAEzNLoSj4e

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2cc27c1723a98ee66c753fadbd8373671629015e1ae05567018d5cefdf198ffb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 704KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 307KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qmrpcsg
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE