8ca078ea760dbe7a4c4f49379d440622e084b9d6271a7d09bb1bce7e30cc5152 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ca078ea760dbe7a4c4f49379d440622e084b9d6271a7d09bb1bce7e30cc5152
Size

237KB
MD5

817a3ca333db19a3353276a5ce5a86d9
SHA1

f304088b4eacafa1747d22c5bf18c7058ada0f8a
SHA256

8ca078ea760dbe7a4c4f49379d440622e084b9d6271a7d09bb1bce7e30cc5152
SHA512

f3101212c2fd54ff6c8e40f4f1882d60f3870d1fc56b83e0856610318d069a3549624c2f82e55aa4148d27d283d939b0af4c27134dd48125e6f100211cfc3e47
SSDEEP

6144:SrY8HXaFrSlmB/mbTgp28WW52So8jwVdZm:CY8HKNSlzbTvNEdElm

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8ca078ea760dbe7a4c4f49379d440622e084b9d6271a7d09bb1bce7e30cc5152
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ