9c00a4a30ca4233eb1797f82babb0f3b497b21c87ddc21de979ddb8d06a95e38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c00a4a30ca4233eb1797f82babb0f3b497b21c87ddc21de979ddb8d06a95e38
Size

512KB
MD5

81b876abe63eb8a27e81ed9dea50b800
SHA1

1343a5fcd1192b5f4dc19b9601e61fa8b1cfc6f4
SHA256

9c00a4a30ca4233eb1797f82babb0f3b497b21c87ddc21de979ddb8d06a95e38
SHA512

ed8d372a8690426187b035a0eeabc4b65a214eb2c3d52f8b8174d9e53448b48754066383d2bb26a896f1c457cb1c4ce75da3f7c312ed0dcc305dc9b005c9e240
SSDEEP

12288:hgr1Bdt7ztGFAaNy6jYFkkrX740507IMCw:hwBnztGXjDkrX7405VM

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9c00a4a30ca4233eb1797f82babb0f3b497b21c87ddc21de979ddb8d06a95e38
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 468KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 469KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 472KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ