c88b621b02821ae0c2ba8a93ca6ee6a6fb2780bd27bebfd346ea708d6488b4a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c88b621b02821ae0c2ba8a93ca6ee6a6fb2780bd27bebfd346ea708d6488b4a8
Size

243KB
MD5

0cba794de7f06b784d6a10ee0548f382
SHA1

841be9d9d7e2a4a5a94f88d6721030f0fd5bf42d
SHA256

c88b621b02821ae0c2ba8a93ca6ee6a6fb2780bd27bebfd346ea708d6488b4a8
SHA512

7eaf0a66244c1f27bd3a0c7b795d0a0361a3f91b5ca5be8768b134fd80bf09cc639aa6d02493211247a7effbaed35c8edf8f5aee9ec3a5fd28fcf9aad769f67f
SSDEEP

6144:bQhFIieW39/jiv9T8aa5OIoqt7Oo29nf7jXx3v5RDtsZGZfP:bQbTCT87OIHZ29PlxRDtsIZfP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c88b621b02821ae0c2ba8a93ca6ee6a6fb2780bd27bebfd346ea708d6488b4a8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ