cfb28e6d0e4869d19bee4fe3e8ba808cd234df67e62fc42b551d30f00c9bf5f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfb28e6d0e4869d19bee4fe3e8ba808cd234df67e62fc42b551d30f00c9bf5f0
Size

239KB
MD5

6517ea60b9bde1ac9f76b68aa259a57c
SHA1

d4d3b51bb915f9c6590c343a26d8fc6fd6baa95e
SHA256

cfb28e6d0e4869d19bee4fe3e8ba808cd234df67e62fc42b551d30f00c9bf5f0
SHA512

bceaf41d8b082498b708b1892b793772d0437594949848d62939cbf1e414f5036663786fc1c65d65641d62ed72f57a9208f2a8f4af9e20bf9f2a7db3b1c4ecf0
SSDEEP

6144:7eEkJ8qgX/bwMb28m0NLDsTK93K7jtAJgeF+:DODgXTwMb2t0N0tQ5+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cfb28e6d0e4869d19bee4fe3e8ba808cd234df67e62fc42b551d30f00c9bf5f0
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 324KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

haatq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE