04ca1e29670ae7d3630892c85a4b52e5acdb706775caab523cc89acde77c16d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04ca1e29670ae7d3630892c85a4b52e5acdb706775caab523cc89acde77c16d4
Size

44KB
MD5

7788fd84dd4843dd24d802e52bc56809
SHA1

1bd18a844a113c97d29c23446556604f70216709
SHA256

04ca1e29670ae7d3630892c85a4b52e5acdb706775caab523cc89acde77c16d4
SHA512

3985c8dda047a7d41a50e326c49d58ddb3ac65c4a7a3ca195034f3474dc8d2295360fa82074db83d2c9131a03599554ec112536c92f7d6e7341be02d8d60c225
SSDEEP

768:kAX9t6nvv9EPKHigi8uvqHlY6GPrDQSC5cHwPnefZK:kAXAvN6qAocEa0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

04ca1e29670ae7d3630892c85a4b52e5acdb706775caab523cc89acde77c16d4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vyrmblw
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE