c440e2640c4d1ff4321149070bc50f7c1f67c17c03fe55756cc49ddcadd8c798 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c440e2640c4d1ff4321149070bc50f7c1f67c17c03fe55756cc49ddcadd8c798
Size

1.1MB
MD5

6a19425d405e859257af0cc31ae8ea98
SHA1

eef1a45cd995653ceb928433600512d8bc5e00dc
SHA256

c440e2640c4d1ff4321149070bc50f7c1f67c17c03fe55756cc49ddcadd8c798
SHA512

fd679090ec26af3ea76c874136d908e1f4f05de6a8698dd2fa778efab0ce6ac56b0e39f2f13b9e89230add0907dff5e2dbb2567b158c6e95bfc3d45df486d733
SSDEEP

24576:DUSjD/uwC01dqV2gR3AuNZYtO+WPRJd3TxlNRLl6xXWU9f1dzjf5rUGIxhixFNcc:IeD2wC0nq8k3nZYNSlTjN9l6A4t/3Ix+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c440e2640c4d1ff4321149070bc50f7c1f67c17c03fe55756cc49ddcadd8c798
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ