1c1b722cd6dfa4ff6f28aed2cdd9133ecfd688575bde9c6abb2b21c689b3e5c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c1b722cd6dfa4ff6f28aed2cdd9133ecfd688575bde9c6abb2b21c689b3e5c0
Size

2.8MB
MD5

125839bb70a3fd731e7114767defc8e1
SHA1

0f3f80f56da6fa345369fc0b6de30001c1d713a0
SHA256

1c1b722cd6dfa4ff6f28aed2cdd9133ecfd688575bde9c6abb2b21c689b3e5c0
SHA512

236f4c2ecec1465605c473b31de2e20e1b13e3562f537b7fd1f4e91a19fb785c0da7d2a2681a191c5270984ed580c5eefdcd00a3da13d1611ff383f24d0bc4e1
SSDEEP

12288:gOGu0VKupOB0fOGu0VKupOB0fOGu0VKupOB0fOGu0VKupOB0ySCOGu0VKupOB0f2:GOyOyOyO84OyOyOyO80

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1c1b722cd6dfa4ff6f28aed2cdd9133ecfd688575bde9c6abb2b21c689b3e5c0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ