c431b82a46b5ae4cbd67067c98ea60a65f1bba4ac7172fdf10a42822100ac572 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c431b82a46b5ae4cbd67067c98ea60a65f1bba4ac7172fdf10a42822100ac572
Size

287KB
MD5

16d1d505bab7f4c74841fd5177f724a8
SHA1

4eeb0cb3a31b94fc723fc28440254b2ec1ed82c6
SHA256

c431b82a46b5ae4cbd67067c98ea60a65f1bba4ac7172fdf10a42822100ac572
SHA512

9771158013053fbfdd73fea1e913eafe2778bbb8cd74926bdfa002ccf285c854002c7fa286589ca7fba22cfd4f2d7a01ae1ad64e7d2821b5327b494dd89648fd
SSDEEP

6144:KchQ+DE3/4YIJ8m1MxUyRzoVOBlYQflIGO:Kch3DEP4BJTM6++OBlYERO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c431b82a46b5ae4cbd67067c98ea60a65f1bba4ac7172fdf10a42822100ac572
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 241KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE