c15c33e5acd79896566a8269e8934123b62a2219c691f0991b967696d887c51f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c15c33e5acd79896566a8269e8934123b62a2219c691f0991b967696d887c51f
Size

95KB
MD5

72941bf6c6e0c2d94a99372925241722
SHA1

966e85af37497c3879e5499a043e2e1f5cca45f7
SHA256

c15c33e5acd79896566a8269e8934123b62a2219c691f0991b967696d887c51f
SHA512

2ec5d39ad31efec586a8d0f4aa8f3249565a5775295d9ffa89ac8a12419b32bd233b6bedacfb7ecbe2c5fc523cdf5cdd17f5a60db09bbaf31c1003c03155d27e
SSDEEP

1536:HO4NTSxuDqKwIuzv2w6XLd813iMWCiKEVyyzsA/816p+/O6zjj3pwbCy/VWNp2Ez:HOwSxuDqK4zvY4VWVoyzsAm6p0O6zjjX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c15c33e5acd79896566a8269e8934123b62a2219c691f0991b967696d887c51f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE