6cd52f0b7b44738eb74f215a507739cca020324e599f1753eafec45f22933df0 | Triage

Sharing

General

Target

6cd52f0b7b44738eb74f215a507739cca020324e599f1753eafec45f22933df0
Size

124KB
MD5

4bfc6f0060a1c88b00763517490abe41
SHA1

5a4e4fb6f0c98156bf844ab30a7ccf5ee439f752
SHA256

6cd52f0b7b44738eb74f215a507739cca020324e599f1753eafec45f22933df0
SHA512

08a1e3cfd16a77cff71fdd2dfaad66b9740ef0ab743ade0f8a9cfc99cfc10a0772a11b1591a0874f399715d89232bd664f2cd063eb6065083edc47121f91a09e
SSDEEP

3072:SkxyDOCBrZY0cvZP0ULNGY6FsEq8vMDJ7n0DSNiIfrqqx:S0y97cvZfN2YDJ70DkiyL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6cd52f0b7b44738eb74f215a507739cca020324e599f1753eafec45f22933df0
.exe windows x86

6452d81cfbb4c0415b365bdb66b2bfdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_adjust_fdiv
__p__fmode
_controlfp
__p__commode
__getmainargs
__setusermatherr
_initterm
_exit
__p___initenv
_XcptFilter
printf
malloc
free
_except_handler3
exit

kernel32

GetUserDefaultLangID
FormatMessageA
GetFullPathNameA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 104KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE