fcf2f7c8dfd1c0b4b2921e6f348b3b82c95db883d8ac73ba2a13e042819c88ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf2f7c8dfd1c0b4b2921e6f348b3b82c95db883d8ac73ba2a13e042819c88ca
Size

1.2MB
MD5

737b0edb1572fd78d83fe3620148fa15
SHA1

ff6bef36fb42002515b98777a364e72a8c701017
SHA256

fcf2f7c8dfd1c0b4b2921e6f348b3b82c95db883d8ac73ba2a13e042819c88ca
SHA512

2637a951a5b6747c77a3eeb5937f94dbfbd7e27718141735e2d1a5c118b4862ac4a979ab80ecd4700a2f4e2ae1cc90cb895eb1606ab77bbde8e01073635a05c3
SSDEEP

24576:vWV7tTqlna/zLwyAIiVZCqCqvou/GAkXSBO37k2DMysKd8h4Xyacr:E70F6gXdGqB/cno20KUaE

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fcf2f7c8dfd1c0b4b2921e6f348b3b82c95db883d8ac73ba2a13e042819c88ca
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

and
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE