4fc6208810194b0486e380360b7f11ed4d43c5c5e2e4d4c99ea7e5a73bf6f72b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fc6208810194b0486e380360b7f11ed4d43c5c5e2e4d4c99ea7e5a73bf6f72b
Size

289KB
MD5

8350867e4cf2765029375b61d81462fd
SHA1

e760c69e9c2b5e11d1b60bc81b4e76b44786b6ec
SHA256

4fc6208810194b0486e380360b7f11ed4d43c5c5e2e4d4c99ea7e5a73bf6f72b
SHA512

8902b41169197aa2adae483dae63a4cadb44b646f25482bc97112269eb67b07d0233079012b2574616406b7097c86b3d76ce1cc15ec285fce72aca68120342a8
SSDEEP

6144:pchQ+E3/4YIJ8m1MxUyRzoVOBlYQflIGx:pch3EP4BJTM6++OBlYERx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4fc6208810194b0486e380360b7f11ed4d43c5c5e2e4d4c99ea7e5a73bf6f72b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 241KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE