bc6c6f5e44ee0821a928e46c48b117dfe8847e38cea22038cbf14070ffc1fde9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc6c6f5e44ee0821a928e46c48b117dfe8847e38cea22038cbf14070ffc1fde9
Size

2.0MB
MD5

bf73573190ac7d0268471aea0b437dbe
SHA1

94eb1bde52185be501bee64bae0c62f2d19d6bb5
SHA256

bc6c6f5e44ee0821a928e46c48b117dfe8847e38cea22038cbf14070ffc1fde9
SHA512

81a841625e086ab1195119aea562c45e7e76ba1d2c61e55a94371449b9f1eb809a8d265227382a87987fb748e4c182718822d9a83c9281a773017c081e3f9e59
SSDEEP

24576:QQJqPMF89tCynA9Ne2mtTWneBIfH4MJ32BOqhdGF8MaS1A2628MvS1:QD8Jq3tre5J3Hq2F8MD1E28Mq1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bc6c6f5e44ee0821a928e46c48b117dfe8847e38cea22038cbf14070ffc1fde9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 1.2MB - Virtual size: 65.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 516KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ