4cc20e0c49b50512816f6f0f4bbbc04379f1c0173d9fe943677805e111260083 | Triage

Sharing

General

Target

4cc20e0c49b50512816f6f0f4bbbc04379f1c0173d9fe943677805e111260083
Size

229KB
MD5

a2592fead66fb3a7563ce00fb0fb49c0
SHA1

3b4af45cf1ddc504620dc71d11b5a9dab7f74254
SHA256

4cc20e0c49b50512816f6f0f4bbbc04379f1c0173d9fe943677805e111260083
SHA512

cee9184bf9343606e58889abf6dbd306921235d43fed36c19ec2e97dbdd2030395dd2692c6b5bebbc34f52a2bc4b3674664836f868239c7acd6c6ff3a488c207
SSDEEP

6144:dYOjE2uPaAoy2wQ7oKOG7zAqamIc+ow4iuz:CO42Woy2h7bD7UqCvt4iuz

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4cc20e0c49b50512816f6f0f4bbbc04379f1c0173d9fe943677805e111260083
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 213KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ