c6624fc290aefb5cf6d0f49d1c7b32a5612ce3cff4fc50a1e7305d5e07bd8679 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6624fc290aefb5cf6d0f49d1c7b32a5612ce3cff4fc50a1e7305d5e07bd8679
Size

54KB
MD5

451aa1fa4b50b98402e3a1fa80d965ce
SHA1

30c7f9c6822713c1e157086df94516d549b406e3
SHA256

c6624fc290aefb5cf6d0f49d1c7b32a5612ce3cff4fc50a1e7305d5e07bd8679
SHA512

cbae2aa6316b2de046d40642a985ba5d9b96b83f60031204623ed02dc3639da3b7333890c8ad226de6e09e131d02b845363065b8587e660837d6400a23f85c58
SSDEEP

1536:acOpQrgu94A9vPZxQSWga3DpOc66g58wPKE28mu0rd:TOSkANZxQSWgEDX6n5Pw80r

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c6624fc290aefb5cf6d0f49d1c7b32a5612ce3cff4fc50a1e7305d5e07bd8679
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ