c0d98fc21381b489b9bf953c51560f28c930d17ef6b9cc9d42e6493129eca8e5 | Triage

Sharing

General

Target

c0d98fc21381b489b9bf953c51560f28c930d17ef6b9cc9d42e6493129eca8e5
Size

378KB
MD5

571a44d5ca63598ec98cd66285f19f63
SHA1

b9992c00aad14aba59f5cb85f0b90f01f683d75f
SHA256

c0d98fc21381b489b9bf953c51560f28c930d17ef6b9cc9d42e6493129eca8e5
SHA512

e2a1e227f8e92d52c77c31851c8bc86b245e18c6666bf7d0a4441b2e6d458b06511619210beb98b6ffb8dba1d45da76b2ca8c3995f38db9911f2c0cb8b35855c
SSDEEP

6144:kVnsmzO9N2jn0WvLXxcBRgAu++4gXYSzLkcLuXEzFwcqoJ4CMq/APYtECsxVvmQK:WUkxjyBR/u++xXYuLkcLuXEzFfqA4CMa

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c0d98fc21381b489b9bf953c51560f28c930d17ef6b9cc9d42e6493129eca8e5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ