8cb7b928e00677e23f3b9ff0092df579b8a5f8000fed40758f3ed82c5f7c860f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cb7b928e00677e23f3b9ff0092df579b8a5f8000fed40758f3ed82c5f7c860f
Size

9KB
MD5

9ca48d8b283a8adc7dd3cdab98a3a2b6
SHA1

08361699e86e597469ab2e69fe7371e507998467
SHA256

8cb7b928e00677e23f3b9ff0092df579b8a5f8000fed40758f3ed82c5f7c860f
SHA512

3fe614fcdad8dc6e437527a317f484d7a2bf8533cfe419cac4051c36b049d862acf0992153a1a3f7c8e383ced2648c59bcd2908ecdfe1d2533b65f8e887a97a5
SSDEEP

192:/TlMi6dUCC1WZTqoXqVLlGTT4UDaZPLJoJuasrVKEkX:/TaIJ1UTqoaVZGXYP+2VKEkX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8cb7b928e00677e23f3b9ff0092df579b8a5f8000fed40758f3ed82c5f7c860f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ