4c51f71497354e3394bfaa8d7465827ff9cc432656d738247f6799471ec0eeda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c51f71497354e3394bfaa8d7465827ff9cc432656d738247f6799471ec0eeda
Size

31KB
MD5

09b4b1c867ef280aab8d1c28e20d3ce0
SHA1

b5cbb2294c1e89961bf2a4323784381dddd57b97
SHA256

4c51f71497354e3394bfaa8d7465827ff9cc432656d738247f6799471ec0eeda
SHA512

60c2e2458dffd8b3b6b3d6473d4984d94959c263d1641b7e8788b62d0702596248caa292c3bf9c17c23e7f56daea6b0281ee6e1122ac46dcad5bd770d4b31cf2
SSDEEP

768:6UMp2rZkgY7c88AiCce1HLcmaBAJ63DggN:Qstw7HiCceJFaWwTbN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4c51f71497354e3394bfaa8d7465827ff9cc432656d738247f6799471ec0eeda
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ