2cbb4aa378c01f3142e0d34be83e6614e011433f31997d8a6f4ccd1652537053 | Triage

Sharing

General

Target

2cbb4aa378c01f3142e0d34be83e6614e011433f31997d8a6f4ccd1652537053
Size

296KB
MD5

25fcfc8b2f5c6ee09b4f5cca53fc51c0
SHA1

f8546c649e7ef6f9a6e5478fb32ee553c606ff6a
SHA256

2cbb4aa378c01f3142e0d34be83e6614e011433f31997d8a6f4ccd1652537053
SHA512

f165f91de22a71e103a41b235fd961fb15747317073985b39377c3274af03a5fb17db33f802e9d278344b20da65d0abbd96b7441b84340c163eb53b714208158
SSDEEP

6144:a0RRLYmhokPmJqL1jL6uR+YLOsjsnN9qKjq7xQLxkaTP0ZinHjw0Wt6uS/H:/RRLYookekkab9jsn7HQCxjPk0r

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2cbb4aa378c01f3142e0d34be83e6614e011433f31997d8a6f4ccd1652537053
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 288KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 448KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ