c8f2c10a80b35ae3217233311ed32b1ee5dd1bcd8e33c577597b8e474f8cfaef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8f2c10a80b35ae3217233311ed32b1ee5dd1bcd8e33c577597b8e474f8cfaef
Size

35KB
MD5

5763e47ff499434a57b8a0d4ce883406
SHA1

b833d60f81435c6b3db3f5e8e8ad89b66597727a
SHA256

c8f2c10a80b35ae3217233311ed32b1ee5dd1bcd8e33c577597b8e474f8cfaef
SHA512

d0dd673149a4ca975b0429b6af72105d243aeb2f6d94eee5124f8bf710b7b8c8a00f992ada63361f796ad9beb55029369ad66f3f20a072e95c64c90c8532376b
SSDEEP

768:5gGlIR9eJ1WJtC+UYPIUIwrsXvDUEaoecnUoU6:6GSROWvUvpXvDFecnUo5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c8f2c10a80b35ae3217233311ed32b1ee5dd1bcd8e33c577597b8e474f8cfaef
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE