cfe05244e5bcee8ec5e1eb9667365b5359aeafcf94a7ca19c25b7aa1d298f5ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfe05244e5bcee8ec5e1eb9667365b5359aeafcf94a7ca19c25b7aa1d298f5ce
Size

4KB
MD5

7b488c6168ed64efa7e25c942916497d
SHA1

7e999708cd225018698fe6bd45837c49965f29a8
SHA256

cfe05244e5bcee8ec5e1eb9667365b5359aeafcf94a7ca19c25b7aa1d298f5ce
SHA512

770d0c098710e2b551b60b0d0aa4ccc0f92c581cf86204d613181c142d807cde63718abadb07d340ab33b0a9ff204b099b942ad4462437c31799873775c9fc98
SSDEEP

48:ibFizSteDOOKAdYzlialjsPeqM7zl/ldzBTzVQ1BGkqSeJY8JTaow1VZC/u28OQh:NkeyOfdMXAm51jzlzVQLGHIZCW28OQ9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cfe05244e5bcee8ec5e1eb9667365b5359aeafcf94a7ca19c25b7aa1d298f5ce
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 1002B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ