ddc341de286667c1b044d5b09a75eb0777a9dcb7ede73a64f11d2ba32963b68d | Triage

Sharing

General

Target

ddc341de286667c1b044d5b09a75eb0777a9dcb7ede73a64f11d2ba32963b68d
Size

1.6MB
MD5

c25fbfc82f2189147701473fd06fcf41
SHA1

6f9879f04a7b74e9409b9e14dcfefa5b393b78d0
SHA256

ddc341de286667c1b044d5b09a75eb0777a9dcb7ede73a64f11d2ba32963b68d
SHA512

8877e62d0354a5a8dff53b00d0e66c6e0d970dc8465be0076acdcf402cd7010ebefdaf3a93edfdc1c5479411ec7538e795509cd2aaf883a23648d5c43a4e27e2
SSDEEP

24576:2BKeZJ8NI8NeZJ8NI83j8GZqFHDUTIqmTJqmTyeZ2eZ+2YPlX:W8a8z8RVsIqCJqCy7n5lX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ddc341de286667c1b044d5b09a75eb0777a9dcb7ede73a64f11d2ba32963b68d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ