0c4e7ab13ed506f4f0937a17591dbc4e20fa3608d94245e553c4de444bb37579 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c4e7ab13ed506f4f0937a17591dbc4e20fa3608d94245e553c4de444bb37579
Size

227KB
MD5

0a2ede39b13b93e6a55e70917fbb422b
SHA1

03dec45d7dd5ec1a2a0a7f027bdb430949f955aa
SHA256

0c4e7ab13ed506f4f0937a17591dbc4e20fa3608d94245e553c4de444bb37579
SHA512

70f08c68148ae5d67e99c11d5441bd5af97dd9cb7fe933e32ff0dcc70c3c617a158438ff4a6ba2e6234896bb811b32e4c8995692b562ad64470d0d5b5bbd40a5
SSDEEP

6144:ufLccbcTSpLowOWBspQgnndPrIBcBXFqq5:EtLowOWm2gdP0a

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0c4e7ab13ed506f4f0937a17591dbc4e20fa3608d94245e553c4de444bb37579
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 190KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ