c326c489b2458236fb69ea29d10ce1b58e4b6ce7e034ba45bde95fab0e6e6b82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c326c489b2458236fb69ea29d10ce1b58e4b6ce7e034ba45bde95fab0e6e6b82
Size

5.3MB
MD5

8338aeefc98c645a8219a3a93d0e18dc
SHA1

5398140657dc365072a10a085bae0d0440cdd0d3
SHA256

c326c489b2458236fb69ea29d10ce1b58e4b6ce7e034ba45bde95fab0e6e6b82
SHA512

e3fde683cd43eee8eb0129ff9c5106019dbbceaf17d191ed40857a4e12dbebac4c5462539c6e880f4eb6c2b57fae2727bb1c186fc6a6b0fba2efeb2d63b18295
SSDEEP

98304:8lfBsVtXUPU2tbPEWXkpUSHUhTT4bCUNjlFTxWO3z1JVWU5Q1M0t1AHc/ooDQMsD:+BkXUc2tlzhwbCUjNP3zHgjt1pDdsMu1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c326c489b2458236fb69ea29d10ce1b58e4b6ce7e034ba45bde95fab0e6e6b82
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 484KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 440KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ