c1c649e6ed896235e0d4cde21404f6eae517d258a407e8737dd309dd66e09f38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1c649e6ed896235e0d4cde21404f6eae517d258a407e8737dd309dd66e09f38
Size

704KB
MD5

bd6fdd5803e5ea5153e917cc6a14913b
SHA1

1aafe4a88472558c9daabd1d7ff7437838903ede
SHA256

c1c649e6ed896235e0d4cde21404f6eae517d258a407e8737dd309dd66e09f38
SHA512

390566794149405a1a6b490a0e020ac1ac62070a62de926c70d399067e53cc7307421a70d937d89402c8a556a37ba32dff38cf717b1bc9a875db136ceb33b547
SSDEEP

12288:H0h9AusPx+EugB8SwblKCpmsaheaB9JJYPaUBsgLLWmmN8shdzR9u:S9Aukx+EuR2kms6Xx6sgfqlu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c1c649e6ed896235e0d4cde21404f6eae517d258a407e8737dd309dd66e09f38
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 750KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Silvana
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE