ce190e19dd6373e4cafb26dd19c93b03744d8cfda463bff38c20894c0433ccca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce190e19dd6373e4cafb26dd19c93b03744d8cfda463bff38c20894c0433ccca
Size

64KB
MD5

826401ce848663a75c7c6c5cde29bcb6
SHA1

7527ebd439e7bb523d2cae3129f0fd7bedbbbe40
SHA256

ce190e19dd6373e4cafb26dd19c93b03744d8cfda463bff38c20894c0433ccca
SHA512

6cfbf6ed4fb111f5c1a50c2b3a7a69d2b5fad1ac232e31c2b149f0d980a57ec4132809f592d0f8cb5f8ffb3c3629cfa6fb9868548729c6094ec49c239b8802b9
SSDEEP

768:zcY5Gj5hNA5oOkPdAVpjzcRSQCcrLhhhcXooCooX+AmBU23STmnlC6KiweHz:zhINKoOkaVp84QxoCFPkUmTnNKiRHz

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ce190e19dd6373e4cafb26dd19c93b03744d8cfda463bff38c20894c0433ccca
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ