cd10d54e8d7aef0e048d3a149059c543852231fa5e7f3d0d39aa21cefc0b83df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd10d54e8d7aef0e048d3a149059c543852231fa5e7f3d0d39aa21cefc0b83df
Size

72KB
MD5

0a470b252597d48ced60e47e458c1450
SHA1

b931f7c92075a3206750dcc18b8fcb22d212524c
SHA256

cd10d54e8d7aef0e048d3a149059c543852231fa5e7f3d0d39aa21cefc0b83df
SHA512

1260682b60ab58ed14d3c885e2e4ed5654779ecbd9e867c1b33418e8ba64be2461ef8ccae682a4add4d99af945778f8ac421d8f0475db7d379d747b665c41dcc
SSDEEP

1536:YX5ZfCgYZfpS/BlVThZz8jZyeBroXuFcQ5TfWfHoB/GZn7w7MnQ8iGt71cyaYG+:YJUZxw5lVVZzeBr2uF5hf4iksQQ83t7j

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cd10d54e8d7aef0e048d3a149059c543852231fa5e7f3d0d39aa21cefc0b83df
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE