07c5a840c1bad8fec6b151877f79e08c17cc2937df9ee7a5fba44e63417a8da8 | Triage

Sharing

General

Target

07c5a840c1bad8fec6b151877f79e08c17cc2937df9ee7a5fba44e63417a8da8
Size

30KB
MD5

bc3df4481b6621264bfa9e04e1bb632e
SHA1

6b4a1f7496a0993bd2b6db3aa8197f1a829ee0e7
SHA256

07c5a840c1bad8fec6b151877f79e08c17cc2937df9ee7a5fba44e63417a8da8
SHA512

8edcdd5ef1b2d83b4043f70d5a22ebc8f60db153012920f07ba8ec40ac27b34cebc5d4f926c45586e2df637ab3d49f33cf75ca47433b617d9e3c1425df9e79e8
SSDEEP

768:i1mhiYYLfeLRYG964B+zs8srhE/jF+3qnSxENZDWRqX/A:iwYfeLR/9V+zrUt3qnSxqZDe0/A

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

07c5a840c1bad8fec6b151877f79e08c17cc2937df9ee7a5fba44e63417a8da8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ