ce559f960d55bcaf68047570bb063be978024c5d3231d0f7ef78ee2e9f9dcfa4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce559f960d55bcaf68047570bb063be978024c5d3231d0f7ef78ee2e9f9dcfa4
Size

933KB
MD5

87f2a3ec99326bc9681a445591603d36
SHA1

16aaaa0bd2acbcb41f44c4f3b31badd479903613
SHA256

ce559f960d55bcaf68047570bb063be978024c5d3231d0f7ef78ee2e9f9dcfa4
SHA512

11d178aae828dafb7b0f6f1a342bd48578242adf5f33a5456316569b3d4e9cc2d1c4ab80cff8351a3ca655211efac736cc3dc67dfa70a9d00ec66b11e43cc54c
SSDEEP

24576:EsGA4sid/p84a3Ohg2G2Oxp9PCh8fOd6hoQ:X4Z7a3yg/9pohxmN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ce559f960d55bcaf68047570bb063be978024c5d3231d0f7ef78ee2e9f9dcfa4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ