c2bdc85b14aea325a0ed28619366bdb0c07a3079edf27b5ed1755ff95058da3b | Triage

Sharing

General

Target

c2bdc85b14aea325a0ed28619366bdb0c07a3079edf27b5ed1755ff95058da3b
Size

7KB
MD5

49765425e0fcfeb7e25845ade522c3b2
SHA1

a1fd0deaf25095f981ee7f4646055d9e8fd18eca
SHA256

c2bdc85b14aea325a0ed28619366bdb0c07a3079edf27b5ed1755ff95058da3b
SHA512

7b4dddbb4645ac1702197703924f0f722509ce274486d8132e11661de760b29777c51e33bc940e20def3533fa54b53fea679eeb8fe01cfed1171a5b8f4dc4b6d
SSDEEP

96:lvUeEHWvCqmXLZfvcOqJ249/GQXXzjjVDxgk3qEOUc3zdgQNzzJvSVN+Gg:lvepqm7pKv9/HXjjjP7QNMVNXg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c2bdc85b14aea325a0ed28619366bdb0c07a3079edf27b5ed1755ff95058da3b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE