c93f2271c72b02b438d2e590104c43d826488313479002721bdff86b07d1ebe2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c93f2271c72b02b438d2e590104c43d826488313479002721bdff86b07d1ebe2
Size

427KB
MD5

09e3daa6590dcf2fb62d4c8f32cfc0c0
SHA1

7b16e4de75869f41df4bd229dfb37afae7539ca7
SHA256

c93f2271c72b02b438d2e590104c43d826488313479002721bdff86b07d1ebe2
SHA512

c414d127b79f01964f8bf701a1113b1cf83994674f8038a25a33394556e8c2d9b2235f69dfbfda028e8ad6adae7a40a82282b41e808f5d086d6877edf8eea2f5
SSDEEP

12288:R77aTvw1CQLUVUiaA4iiq2fSPLzfS0braMFMPQo:R77CI1z3iaADzj3F8Q

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c93f2271c72b02b438d2e590104c43d826488313479002721bdff86b07d1ebe2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 384KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 423KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 716KB - Virtual size: 714KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ