ddcc2e353dd6a9d13d1c7ae2a8f50059bc37d5ea5686af559c96477443d3426c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddcc2e353dd6a9d13d1c7ae2a8f50059bc37d5ea5686af559c96477443d3426c
Size

444KB
MD5

d2c725473f3f4aa3108f9f757b2ba63e
SHA1

17f6e3bd91f00421d0936e98f67b3d39e2395cf9
SHA256

ddcc2e353dd6a9d13d1c7ae2a8f50059bc37d5ea5686af559c96477443d3426c
SHA512

94efe13b938912136103c5d858a95cd4ded1c1f06063be176414de8a90fb17c57fa48b8c7b1ba157eb56b09408be4d430c53f0131f37ae5fe0d46020d81b2646
SSDEEP

12288:qHD3DR+rKrbfNulY3UOSg9c1yTWrvCg1Kfy0qq00hE+:q7t+rac60geyMvCWKfL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ddcc2e353dd6a9d13d1c7ae2a8f50059bc37d5ea5686af559c96477443d3426c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 437KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7vhClio5
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat_68
Size: 123KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ