ca9a1a0ac20760bc49cba08b5164d68a2ec6f56505ef5cfc0336242cdf8016b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca9a1a0ac20760bc49cba08b5164d68a2ec6f56505ef5cfc0336242cdf8016b2
Size

369KB
MD5

902bd3e3e3215bfc2df11ee1f815c49d
SHA1

820cdbf67665aa84f7587fbfa7358c287fd29ecf
SHA256

ca9a1a0ac20760bc49cba08b5164d68a2ec6f56505ef5cfc0336242cdf8016b2
SHA512

79660b44e21b57cd4d4293227db78ce2baf18434bad06cee5cea6effa0851c12ded12e7b7a2f1aee7e04807743845a268f812ccbd8962c0ce19270e620ebd0d1
SSDEEP

6144:xK2ORvcxGGWP2fMOdgz2RMUfU5Sbv1+F0wLrNr4VNMrnc5orD8f7TcXSLaZr8Vlr:xK2ORMc2fBga9fU5Ke0Gpr4oTC+D8fMU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ca9a1a0ac20760bc49cba08b5164d68a2ec6f56505ef5cfc0336242cdf8016b2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 354KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ