ddf0c742b2d091d4b613e2807bab5bd855b669dbecc36991fee7c8dcac68d076 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf0c742b2d091d4b613e2807bab5bd855b669dbecc36991fee7c8dcac68d076
Size

195KB
MD5

05ef268537b156716829f4915b788776
SHA1

9955d60aba320ceaa3b421af0469a45da56f6197
SHA256

ddf0c742b2d091d4b613e2807bab5bd855b669dbecc36991fee7c8dcac68d076
SHA512

c3eeef8c41236c8482119eb13dd3759b8462c0b6f86320bbddead74eb7037ec3e88fbef0fbb956c177c71223aefbf3dc63f7d8fa29afabef9baf483c1a8cae49
SSDEEP

1536:XUcJ8nZsY9fGd1NzV9C3gURyQmPOLHhvZe:gnZsofGd1Nh9AgUcMLH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ddf0c742b2d091d4b613e2807bab5bd855b669dbecc36991fee7c8dcac68d076
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE