c115fc6d4698be4628f69b0132ea407d0c4c48095edbe40b2a39017fe530fe9e | Triage

Sharing

General

Target

c115fc6d4698be4628f69b0132ea407d0c4c48095edbe40b2a39017fe530fe9e
Size

20KB
MD5

3bf13246ad0a927bebc6573ab1723470
SHA1

007282f83a410ee6b460832b2a23f24dc41f1029
SHA256

c115fc6d4698be4628f69b0132ea407d0c4c48095edbe40b2a39017fe530fe9e
SHA512

a7b34e62e6e5885399c95429bd4a1f13d8e99cdcdf0d01d0fba536180e1acb3d69904886df82ac0afb7aca1679e10e963dc44e74bd06f9f2505012e8d92af511
SSDEEP

384:bYLJAx/kZ+Nxw2ug8l/RS6Zw4AcuRxii/Cdxrp9nq0IUUiPU922Z4WO8zDWMn:biJApkAdug8lRY3ur9q0IUUiM95Z1zZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c115fc6d4698be4628f69b0132ea407d0c4c48095edbe40b2a39017fe530fe9e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ