7c39aea778f928bf44db01cd6309237b03ae2a6a3875c6616c07d4038beb642a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c39aea778f928bf44db01cd6309237b03ae2a6a3875c6616c07d4038beb642a
Size

246KB
MD5

6584c43b7ce390bda49dc555c51fe4e8
SHA1

794021c2a36301abd3620f02d9ad8eb1d71c83be
SHA256

7c39aea778f928bf44db01cd6309237b03ae2a6a3875c6616c07d4038beb642a
SHA512

088b32af9794fdcf2749c53bc1ac205e5a6bc04ff85aae9e55b82811606241de9e52199122ea03a1a3f56529b7f321d12bfd249de61e36606da27bc13a171994
SSDEEP

6144:Ce7IXJxrOLw85Z/7lDUjNj70ew+y6DcVTdwCDNKOL:CeOxh857DwNjw7H6DwhwCDPL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7c39aea778f928bf44db01cd6309237b03ae2a6a3875c6616c07d4038beb642a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 173KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 440KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ