c5679fbef4d2b1313fa78daa36d0cc780f70f62a46754b39c3819b6501e98da7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5679fbef4d2b1313fa78daa36d0cc780f70f62a46754b39c3819b6501e98da7
Size

88KB
MD5

a3fea85409599fe97c9d12ec1c0da12c
SHA1

1beed0fe2dfad1c36fda6a4da8b6b42956989a30
SHA256

c5679fbef4d2b1313fa78daa36d0cc780f70f62a46754b39c3819b6501e98da7
SHA512

9e389a9861985e43d26b641181058adfdc6cae0fdff62696239d81d241da890b266989d19248a17e651769a6c0a3670c7aaae7a60653b8d3c61223cea06b4a8b
SSDEEP

1536:DYXhE7nyj8TyeP4JBkr7GomZTWmS7LVeef4pKj/Avk:hpB4JBkr7X4Ts7LIIzjt

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c5679fbef4d2b1313fa78daa36d0cc780f70f62a46754b39c3819b6501e98da7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE