cde9f0ed9cd1711126a7e7f10914dc4606e1c7dcb01a22aac99d4ec65701f32f | Triage

Sharing

General

Target

cde9f0ed9cd1711126a7e7f10914dc4606e1c7dcb01a22aac99d4ec65701f32f
Size

356KB
MD5

00ca99be09815a2836b9f75efc4e5a62
SHA1

29e7ab6ce39f1a5af018b8f1a70d2e293f98756b
SHA256

cde9f0ed9cd1711126a7e7f10914dc4606e1c7dcb01a22aac99d4ec65701f32f
SHA512

c1fabd00b60d4e897344e92ad64ca2fac7783b545463e72904a4b58fc25db047b5ba424746d94716263d4947aef8482db0264c8ffcfcbc905b8a8c42eb9d9daf
SSDEEP

6144:uTQQXhU/PRNhTkWA/M2WaFWRqSbJbwLfoFD6s02BPEU9XId/dkXrVQF:4XRUxny/3BWRRqls02BPfdId/3

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

cde9f0ed9cd1711126a7e7f10914dc4606e1c7dcb01a22aac99d4ec65701f32f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 692KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 293KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 568KB - Virtual size: 565KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ