c2b938ea3300fa272e1357176f5f983a9b4a13f3743b1ad5d77ac79604e04b6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2b938ea3300fa272e1357176f5f983a9b4a13f3743b1ad5d77ac79604e04b6b
Size

121KB
MD5

21a2a25e729b55439beb860b00106355
SHA1

6f626a190971091c0c45f700b9cc48858a84dc4d
SHA256

c2b938ea3300fa272e1357176f5f983a9b4a13f3743b1ad5d77ac79604e04b6b
SHA512

cd68f364810ba1783a84544f21e4d558bf598824fb7e68fc4327e89851eebd8e86ab86d5860ed7844872c0ebaf6f3f17b4436f702f62926aa978f629b49fbf75
SSDEEP

1536:Imi+xxdgF45E4h2Hnq8OFnouy8CBZl8lXWVi:Imi+/dgy5Ef8doutaZlYX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c2b938ea3300fa272e1357176f5f983a9b4a13f3743b1ad5d77ac79604e04b6b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qcyrwal
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE