c11f4f996fd3965d3caf40e893dfdc21d89e176fbfffb8e8d173ce61e4c44bdc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c11f4f996fd3965d3caf40e893dfdc21d89e176fbfffb8e8d173ce61e4c44bdc
Size

329KB
MD5

e2bc73fdc5863b3688163fea5ead5060
SHA1

5453c81557af4bfe0841b3cf8a572d78345f2731
SHA256

c11f4f996fd3965d3caf40e893dfdc21d89e176fbfffb8e8d173ce61e4c44bdc
SHA512

01cd280acfb3bc72580e4aa289879fef16f0a4645f60b50c6d3dae0899d615cdf936b8f7b02c8685369484894fc448249ccb4702c3f3364f80586dfcc4bf6147
SSDEEP

6144:jVe8qhQfSgh99odOiXteMo1+rJZ53SGK/XnNUUcd6T1fQaJGs6yfRQWq5v8ylt:ZlqhyL2dOi4Mo1+1ziGyNUU+EhZJl6C8

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c11f4f996fd3965d3caf40e893dfdc21d89e176fbfffb8e8d173ce61e4c44bdc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ