c8b0eae4908381e30da2018dbd09a5b3cd82f8798c18ff483fe148de16c1aa82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8b0eae4908381e30da2018dbd09a5b3cd82f8798c18ff483fe148de16c1aa82
Size

489KB
MD5

0a7512b35ce598e967737d3e0a5b6ab2
SHA1

2cac3ce6df2376ef083c4b63fce85a7d7cabc5e1
SHA256

c8b0eae4908381e30da2018dbd09a5b3cd82f8798c18ff483fe148de16c1aa82
SHA512

6daa9a9cfdd55963cce3afd77a5e0893659474285d39d7cd816ad2299473eb459d0333c4ae62c35dab8c199d8cce02efb77fcf5c3d9237ea0c4b18b333f283f0
SSDEEP

12288:cfnnK9zABs+TbFx9SXOPCf8DkqAR8zHMrcVCzfOzoCKfOEe:cfK9zUHFpi8/MUmfwoFWN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c8b0eae4908381e30da2018dbd09a5b3cd82f8798c18ff483fe148de16c1aa82
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 472KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 298KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE