010c350539e9a15e7ef5771176785017c4f62e089bc4fc1b4725a3b84c46e0be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

010c350539e9a15e7ef5771176785017c4f62e089bc4fc1b4725a3b84c46e0be
Size

53KB
MD5

b9d82eb91216f65df8db533d3b11c30d
SHA1

cd15841a40d2c2502d290124de2908b26aa7bee8
SHA256

010c350539e9a15e7ef5771176785017c4f62e089bc4fc1b4725a3b84c46e0be
SHA512

a4038aeafdaa5a0966061644419aeeefe1d8649f9afa5d37d2a1162614e176962b564da3f0183e8720fd925f39d0d5a4aaee4e1a89d113cf03c4e6c96f45afa2
SSDEEP

1536:LUYv7GPPKo8FI3ll+9nBWI1vkSAoRCm0Rl0Eyrm:LbGPSrMTefvn7RNrm

Score

10^/10

upx

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

010c350539e9a15e7ef5771176785017c4f62e089bc4fc1b4725a3b84c46e0be
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ