cb2f227ac7e683f86c6007f804a624a1c6f1880127d9740be5b0dba4520f7e87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb2f227ac7e683f86c6007f804a624a1c6f1880127d9740be5b0dba4520f7e87
Size

313KB
MD5

5bc09e38dbc5668d3adbcafd2127d3ad
SHA1

0c935c6187c0f85a63a0a08728a55e8f5f107331
SHA256

cb2f227ac7e683f86c6007f804a624a1c6f1880127d9740be5b0dba4520f7e87
SHA512

90fc9c7feed5e96b3d2607ef3f48a4d8722d2bfb9ad5afd795201a24bddb9e2dda2c7d8cdcda772488e761e9eb47b040abc732b5387d6197063b817bdeafa4af
SSDEEP

6144:+dhECAxhhcGcUvZ8GvGNoDGbNV3IVt07P4hkkeU8Sb98X/8kSg7/ZvTUPmUDipm9:FOGckobhV3Im7wh3B98X0KdTilipwRcG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cb2f227ac7e683f86c6007f804a624a1c6f1880127d9740be5b0dba4520f7e87
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ