cf6030a03e3a6517aad361e8696f59fa444ee866c169cae734c07db01fe880ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf6030a03e3a6517aad361e8696f59fa444ee866c169cae734c07db01fe880ba
Size

102KB
MD5

131ca043d8683c90272a9a4936b53c8f
SHA1

2cf6c1be0f361770286865a2370820f7995dd465
SHA256

cf6030a03e3a6517aad361e8696f59fa444ee866c169cae734c07db01fe880ba
SHA512

962578b0051a7f37cac0369cbb5c680f7a9b98e672ec0908f54c5496905130baac921222d2a3aef00fb2b2c4a35cd2d656270c131f9c03695d87c3531673be6c
SSDEEP

1536:rgYvmWkPvPCznX5Y8aNaTYSGiCNGAYAX/ptV2ckjvcBWufabuOgG1KukJiwlHPNO:cdhCzpY8aMFCr/3PkDc2b3gG9kJieO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

cf6030a03e3a6517aad361e8696f59fa444ee866c169cae734c07db01fe880ba
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ