ca364fc3dbf095e4d4a5d35941c5843568f734fb14654d8a99cf80f1d7a276e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca364fc3dbf095e4d4a5d35941c5843568f734fb14654d8a99cf80f1d7a276e3
Size

245KB
MD5

e236c6358d2ca101260a0617422ad5fd
SHA1

9de4cbeeaa643845bd68530ab623a38dc58c6133
SHA256

ca364fc3dbf095e4d4a5d35941c5843568f734fb14654d8a99cf80f1d7a276e3
SHA512

d948b03015f67dac638ce42c1f6b7f9143cfed6abc89a86b0382b99a916c57d9f1df440c27a2ce47e7b3c6ed39dcd31a0fa44ebc9dc3bde58046051f979af51a
SSDEEP

6144:5uHOME2EBE2Ernmy+g4VrG1VVE+I5E2E4:gODMrKuV4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ca364fc3dbf095e4d4a5d35941c5843568f734fb14654d8a99cf80f1d7a276e3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ