cd90fd1d6a1e63811aec0d6d1cecf1e3d8b0d17aef971c1bf24c66169b43b272 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd90fd1d6a1e63811aec0d6d1cecf1e3d8b0d17aef971c1bf24c66169b43b272
Size

5.0MB
MD5

94acbef95b886173e5c12ce2f3c3e4e6
SHA1

9a07344dca37e41cf07b82c4b8e7f96979309954
SHA256

cd90fd1d6a1e63811aec0d6d1cecf1e3d8b0d17aef971c1bf24c66169b43b272
SHA512

a17cdc7d6e47d7c60adc0ff7f81ad9010b8b5ca331b0bc91137c90ea6e6030798f7b6003204dec851600e32a44180f66d7fb1e39e44507faeef4cdff8794c502
SSDEEP

98304:ApbhJYXcO5I7c0jYMMIeke9Vyz47zu5PiAXrOWo3I33P2f93xN5YhA:Apj4O7c0jY6kqaACWo6Pm9f5KA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cd90fd1d6a1e63811aec0d6d1cecf1e3d8b0d17aef971c1bf24c66169b43b272
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 552KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1017KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ