c04fd83da7f7a2d27179839daf7e6cfe6070548933036a5fe7347fe0caf2041a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c04fd83da7f7a2d27179839daf7e6cfe6070548933036a5fe7347fe0caf2041a
Size

406KB
MD5

3fb16826afffde4d521d1512ccfe1190
SHA1

aa3e20724eb72295ec871dab9a1f3e12e0d4b07b
SHA256

c04fd83da7f7a2d27179839daf7e6cfe6070548933036a5fe7347fe0caf2041a
SHA512

71ef656896f27a7ae12edc49efe5d433082c53f08613e809e178a1e1d1f1a1c8ddce7c66fac103cb15dfb3e81be6fce11eebdf756e9dc3cd9ef9872ebb683cab
SSDEEP

12288:vrch+WSq6IiJANaWo1yM8lQ71oYkkUG5zQC3:vQbSqNyANaW+yMBRoYkk35zQO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c04fd83da7f7a2d27179839daf7e6cfe6070548933036a5fe7347fe0caf2041a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 328KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 380KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ