ccabe67245d19f7a4d2a97482896888dfebe16b03ee51e91c0ab8eac7d03b7ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccabe67245d19f7a4d2a97482896888dfebe16b03ee51e91c0ab8eac7d03b7ac
Size

16KB
MD5

3536eda1a4e59cedba087fd9ec9aecbc
SHA1

9bb53d43dba82b6c6c51e5c86edaf0ee80fda6dc
SHA256

ccabe67245d19f7a4d2a97482896888dfebe16b03ee51e91c0ab8eac7d03b7ac
SHA512

d8f1c2d1fa3e8bf4fb70a3c8aca15691f177b99d7133b465b6ae23a84994e98a02cd8522578031975ab132ba3cac0c88601c8ff011c7cc633351fb659bcd9c65
SSDEEP

384:HbOlrixSCHCoOFLXcIziUDQ0FxoDrc3/g7VBTm0w98RW0u:7O5CHm5MIzjDQOxoDrcvg7zc6W

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ccabe67245d19f7a4d2a97482896888dfebe16b03ee51e91c0ab8eac7d03b7ac
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ