cf5996fd842a8e14c1af9446caa18e49382e1c214c7810ac65043e0c5e11c3a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf5996fd842a8e14c1af9446caa18e49382e1c214c7810ac65043e0c5e11c3a1
Size

13KB
MD5

51e847faafa376419ae46394b0f5ed40
SHA1

32caf1d64b31687445b42911d4644a2dd16e1f20
SHA256

cf5996fd842a8e14c1af9446caa18e49382e1c214c7810ac65043e0c5e11c3a1
SHA512

9e6016e2d511672c45a121f5aa8f81ed061dd46c0b7d9e5d5e39cbeeb92c1b769ebc7fcc898c110fee7740873e8448751a68ed04c19cfa0151cec8eda9739118
SSDEEP

384:erZF9hIEfT+95ZTaUlLN6Zj+PfvMNIofxLNMkj4PYhA:el/hLaZTaUlB6pjNI6NM+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cf5996fd842a8e14c1af9446caa18e49382e1c214c7810ac65043e0c5e11c3a1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ