c0c46f5be5d5739dc3a8e758b6bab7ed8883b58fc2bffd026147a38e7feb624d | Triage

Sharing

General

Target

c0c46f5be5d5739dc3a8e758b6bab7ed8883b58fc2bffd026147a38e7feb624d
Size

186KB
MD5

13073ebe522b75413777ce5464ec0d56
SHA1

cf47c00c319e214612b8c01b43462af9d2abbaeb
SHA256

c0c46f5be5d5739dc3a8e758b6bab7ed8883b58fc2bffd026147a38e7feb624d
SHA512

39dbd987231636753456130ed240b5c67cd0cb7811d58f7dc578d2b10e027eae3391734891efa021a3ee950ad949e3e59f6cf2e3c64e6cc7a852fdd97ceafe52
SSDEEP

3072:rFvg4i9/EEr8Lk1NgK80lqLWeGONZyo5JkCIoCcQFmE1YLfth1XYWW:tgZL4LEV8kjbONZdkCI70jH2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c0c46f5be5d5739dc3a8e758b6bab7ed8883b58fc2bffd026147a38e7feb624d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 181KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 704KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ