c82bb26ac9fe866eb4b28b4cf3e4721803013772f9ca568dc5ac3098d8178f71 | Triage

Sharing

General

Target

c82bb26ac9fe866eb4b28b4cf3e4721803013772f9ca568dc5ac3098d8178f71
Size

80KB
MD5

35d1fea2b3e71b50d0fd7fec65c8f715
SHA1

378633c55a538c15c146186435374ef8a52fb426
SHA256

c82bb26ac9fe866eb4b28b4cf3e4721803013772f9ca568dc5ac3098d8178f71
SHA512

79122e3053848ecb0c46e60339af56d9d4820221f254cb2e98b0587163c23db9d9f0f20d7151b2cab2f7c4ae47b1ef02d33187ba56f9c3bf195559f5206120fc
SSDEEP

1536:xkkTEd9qvBpUvDYxUQohftALYI6k2vulVAxkPeMQAC5/Ea7Mi:6kTEddrSiLk2W+MZC5/EaA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c82bb26ac9fe866eb4b28b4cf3e4721803013772f9ca568dc5ac3098d8178f71
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE