c24bc72a5565423199970f05509349766a34577247ef81d1a7f596410d37e306 | Triage

Sharing

General

Target

c24bc72a5565423199970f05509349766a34577247ef81d1a7f596410d37e306
Size

42KB
MD5

13f1183350b58e954a8e2d7649a40ef4
SHA1

73aaebc4c8cb44e6955a89d3df7e6894b41cfc58
SHA256

c24bc72a5565423199970f05509349766a34577247ef81d1a7f596410d37e306
SHA512

9f7a1045a025d0a315067a14baaa0bd19709e424383e6e1e02212bb83376e8af1f8a9c81129fb42ad498b59643d35b88e6a9cb2403d95af93af4501c05b24ee5
SSDEEP

768:SCIqdH/k1ZVcT194jp4mBWEGlSV/koh3OdXoFflkHl:SNqaLV8a6m8EGYZh3OKB8l

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c24bc72a5565423199970f05509349766a34577247ef81d1a7f596410d37e306
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ