c5bb61dd67b059c687b22d92c59d39147fa714263ab0b8354218d8babb749b6c | Triage

Sharing

General

Target

c5bb61dd67b059c687b22d92c59d39147fa714263ab0b8354218d8babb749b6c
Size

6.4MB
MD5

6df7c43678880d36ec07e6c7ddedab33
SHA1

511aff68a98cd06be899e67e50914903d8c9079c
SHA256

c5bb61dd67b059c687b22d92c59d39147fa714263ab0b8354218d8babb749b6c
SHA512

1f40652e0385bee6ff7b0d75f74a5b606466f00b4eae92dfd856b57ccdfdc057bd0e14a1157268491072e566a38e21c7a809a1202e800841bfe1a61daae8c10c
SSDEEP

98304:vrQZMrQZMrQZMrQZMrQZIrQZMrQZMrQZMrQZMrQZV:vr2Mr2Mr2Mr2Mr2Ir2Mr2Mr2Mr2Mr2V

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c5bb61dd67b059c687b22d92c59d39147fa714263ab0b8354218d8babb749b6c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ