13c0d13601b63146e5a39577d070471cddcd002a8e7a685d05e3236c6c510c50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13c0d13601b63146e5a39577d070471cddcd002a8e7a685d05e3236c6c510c50
Size

262KB
MD5

15d4f56186ef0d462403c3009158b63d
SHA1

b27e1835cfec19faac0469c76a8b5d758a4c2464
SHA256

13c0d13601b63146e5a39577d070471cddcd002a8e7a685d05e3236c6c510c50
SHA512

742b1de32b84a94e61451e56f080b239c74ae100c31b3b1aeb47e1ac2b2688cbc9cae82f687be1c693642f8e3a2deac8552b17fb7b0aa735ddab5b9eea70c2ab
SSDEEP

6144:D/RWce+2pciO2DvhkdOzEkOwa+l/pQe+zOeKRqaNd:DJapc8gO4tjCpQe+aRqaN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

13c0d13601b63146e5a39577d070471cddcd002a8e7a685d05e3236c6c510c50
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 572KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ