4c9888bd0fe8a23fac06397fe059ba2eca98ce8555ce4a0b575c6b7559ac9e93 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9888bd0fe8a23fac06397fe059ba2eca98ce8555ce4a0b575c6b7559ac9e93
Size

622KB
MD5

a152fcd28db0f62b74d03db5826b3150
SHA1

e707734f61b31273f9be91aa7234795fc444497a
SHA256

4c9888bd0fe8a23fac06397fe059ba2eca98ce8555ce4a0b575c6b7559ac9e93
SHA512

666034e3fb0f60bd3fa4c6000a8b164c354a18c86da2b9a37ee8521d0263a67d363e53640edfd048dcf0ab5144e1d0b3c746789f6c92b09f4fe4cf6b4f5c0207
SSDEEP

6144:5uHO3E2EBE2EorG1VVE+Ih/UOPSe570Szp3ArG1VVE+ITUAqq3VAWdHm56Siwybu:gOSMkupOB0/u5AqOm5yOvei3Dd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4c9888bd0fe8a23fac06397fe059ba2eca98ce8555ce4a0b575c6b7559ac9e93
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ