cc27a6fe00b9997800c45e00e26ce38129860a1db37fb18a8821b7e82fa43330 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc27a6fe00b9997800c45e00e26ce38129860a1db37fb18a8821b7e82fa43330
Size

796KB
MD5

001090003ca46ba4d9e44a8adfffc5d0
SHA1

ecd3d895a9e482ad25369ffd247d44a0de672203
SHA256

cc27a6fe00b9997800c45e00e26ce38129860a1db37fb18a8821b7e82fa43330
SHA512

c4146a19a8dd746912a8d1349f4d225fa6efa9435e8c46ddfd0f717bee213bed73004827a553962e615549b603073a9743e76e4d3067560b7a60baf3dc942d9c
SSDEEP

6144:kYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO7BUYZTNk3D6LyUXwL:kSNC80I+cR3R03VseuOtUSNC80

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cc27a6fe00b9997800c45e00e26ce38129860a1db37fb18a8821b7e82fa43330
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rol
Size: 20KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE