9cdb24191fe38cb0120fcd2461ecbe32882dd65f7cc768425c886a6bc9805c07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9cdb24191fe38cb0120fcd2461ecbe32882dd65f7cc768425c886a6bc9805c07
Size

32KB
MD5

67f05820f38cf6ce319d92b55bae0956
SHA1

2fa0eb4ca03729b90d6756fb1059cf50872ea5d3
SHA256

9cdb24191fe38cb0120fcd2461ecbe32882dd65f7cc768425c886a6bc9805c07
SHA512

8de4313246b7e85a6557bb64d4cc123d68ef8a9591fa51c90ee7779064d562433844885798905f3c573678bc44d06931517a9c23baa6f5a7d018c8945ea7a0a8
SSDEEP

384:nt40q6xLGhddeHi3/AfigB02yZpBvgOeHItwUtPxC043O:ntrq4LFHivAfd/yZp92XOpCv3

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9cdb24191fe38cb0120fcd2461ecbe32882dd65f7cc768425c886a6bc9805c07
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ