d0c0e8a048c232402389b654e3914a7ec55390300ac25aeb9a5b7aa94e70e65c | Triage

Sharing

General

Target

d0c0e8a048c232402389b654e3914a7ec55390300ac25aeb9a5b7aa94e70e65c
Size

180KB
MD5

60353b33e63defece6be117666f2b3a3
SHA1

b43f0f05bca27886ca463d666478f1f459bde11a
SHA256

d0c0e8a048c232402389b654e3914a7ec55390300ac25aeb9a5b7aa94e70e65c
SHA512

d8b33104af2f079e3603739ad58bad0d94163606cd6f70e9a06c041d11fc2267ea74c5e231c2f7bd7cb5e9e2d2d4f00334d757160fa9e467beaae3afa5aaaa61
SSDEEP

3072:LLQ8WqlyzovUZRNB3Y9/YtpTDR/U/y6jEqtq25neon:L7WqlvvCkapTD+y6jFtL5ec

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d0c0e8a048c232402389b654e3914a7ec55390300ac25aeb9a5b7aa94e70e65c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 620KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 712KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ