cb2289cc63b402a3cb085b20108e4744932da678c4d32f01c1d5dc386bc529a9 | Triage

Sharing

General

Target

cb2289cc63b402a3cb085b20108e4744932da678c4d32f01c1d5dc386bc529a9
Size

393KB
MD5

8cd0df1648102eaf1ae50da01bb4c339
SHA1

58b7db2cef0319d05ae0288fcd3ed59ff8ad40d4
SHA256

cb2289cc63b402a3cb085b20108e4744932da678c4d32f01c1d5dc386bc529a9
SHA512

0caa9e0be24a8d8446099299cf3bf3f3c0100f62d19727dbc1d453c2ecff8c87a000ac1b9b9fb8661331e80a0ad23a7afda013da74888afe53cad0b34b7d8fbc
SSDEEP

6144:BpdlRQUrbslZwzYdC5tR1bYc0sCLgwZaffdtw2nRfzQpT3+yfrabvpy3gumMlBRR:OV3wzYdcbk2w/sRkxspBoB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cb2289cc63b402a3cb085b20108e4744932da678c4d32f01c1d5dc386bc529a9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 390KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 772KB - Virtual size: 773KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ