c4b64d5293d87535d9bd5d9a8f12f6c3b6da02a6da57f00f3335865bd781df9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4b64d5293d87535d9bd5d9a8f12f6c3b6da02a6da57f00f3335865bd781df9f
Size

39KB
MD5

34ef4acdf9367c85c812f1ce0e554e82
SHA1

884612bb4c242bf2ac804add5622f40f3ba0f55c
SHA256

c4b64d5293d87535d9bd5d9a8f12f6c3b6da02a6da57f00f3335865bd781df9f
SHA512

2b050f87ff9c839335f93900c0d6a8613e9da8a436ed157c33ec069d43e613f4bf3deb6ef3f6edd7cdd240b8c5eaf2eb0bee1f1af42f7aaaffa6cfeaf9443869
SSDEEP

768:WCqlDqcWSSjaRRFq22RVEsgWktlK8ozhVP3K2TiyFDo9d6eMYZ01zsh8GX:NqCJjaRf12PEs6lKJXK2Tkdb2lGX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c4b64d5293d87535d9bd5d9a8f12f6c3b6da02a6da57f00f3335865bd781df9f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ