1c466fc3ce495e09afb8421b12fdcafbbd1c2251afb2b7c7e84ca073ea6d712d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c466fc3ce495e09afb8421b12fdcafbbd1c2251afb2b7c7e84ca073ea6d712d
Size

175KB
MD5

22eec76dd0af3e1b00085935df5f66e6
SHA1

3f1783096e4df173ff047de41438c6c1ec6ec08d
SHA256

1c466fc3ce495e09afb8421b12fdcafbbd1c2251afb2b7c7e84ca073ea6d712d
SHA512

a7aad884b8096e1fd5f47071e80a3fbea0c9f9320aafff98ad68ed57c333e6b6dd63503f312c6d72c01627d4100e2183b0f1d191466b6dd9951769e1d1dfa77d
SSDEEP

3072:imi+/dgy5Ef8doutaZ/EOxf/z95bLB08Uf+oZJF7Jx7JxsVK86AA6AAu:itSEf+oSaBEOxHpRLi8UlH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1c466fc3ce495e09afb8421b12fdcafbbd1c2251afb2b7c7e84ca073ea6d712d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qcyrwal
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE