c31602dbb98ad1f909b32d2d2089f4fe57e752d64ace408a497e7b9a3ef64d40 | Triage

Sharing

General

Target

c31602dbb98ad1f909b32d2d2089f4fe57e752d64ace408a497e7b9a3ef64d40
Size

234KB
MD5

cca0e8323e70e595fa631302faab3ba8
SHA1

a27bfe66a2c9fa24c647266fbaf0f41df8e8488b
SHA256

c31602dbb98ad1f909b32d2d2089f4fe57e752d64ace408a497e7b9a3ef64d40
SHA512

d3462e030382dd4e444c1244da458f2d6bad0eca071b46d73691f13f977e4d55cd0576575e5755b93a988b897e8d684ae28d90a42800ee604e5f51c4322ec3ed
SSDEEP

6144:5LlRVrEKrZukPwy7OQobOVcTy77DvdX/E4u6j:FdEa4VyqObvdB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c31602dbb98ad1f909b32d2d2089f4fe57e752d64ace408a497e7b9a3ef64d40
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 206KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ