cbca0e2dc5d0d7251db3aa04130eb70be66d14019cfcd0b1eb914e83ab5d982d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbca0e2dc5d0d7251db3aa04130eb70be66d14019cfcd0b1eb914e83ab5d982d
Size

70KB
MD5

868d06544fd5cb78c8b813165e07b601
SHA1

af0580b48b68fa123d986c35115a6591f0ae94ff
SHA256

cbca0e2dc5d0d7251db3aa04130eb70be66d14019cfcd0b1eb914e83ab5d982d
SHA512

48d1ad1efca47978379851a3603578e265d5ece75dd4ecbd3aa352eb1eca5bb83a8eb528bb5e9f4ccafa1e9406ee4b0b7c7799c28b1b65f60afb59bbe282e252
SSDEEP

768:wwC9q/QDt7waqfdu0Na6pjg9ChAYAd0o1o88x7BNhClIU3vsXXhdDSB:W9q/QpKVNNaihAex7kld3vsHO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cbca0e2dc5d0d7251db3aa04130eb70be66d14019cfcd0b1eb914e83ab5d982d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wtq
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE