c7c21425d6dcce04c86a1ef76ad66ccec551a3dff0a14da88a7bce71ff2cc9ba | Triage

Sharing

General

Target

c7c21425d6dcce04c86a1ef76ad66ccec551a3dff0a14da88a7bce71ff2cc9ba
Size

302KB
MD5

aa35175cd92d17c45b4c087601b8f5cc
SHA1

beef05a13f12242d17132ecb4332c3f064e26164
SHA256

c7c21425d6dcce04c86a1ef76ad66ccec551a3dff0a14da88a7bce71ff2cc9ba
SHA512

e973f5d68a12add70b63c87d488b92f3bb8736628ddfaf2de6ebc0b96db8a86340023fca545c34306d915b2cb29f42ba9f108f7261a2d83a123ef00e27f642fb
SSDEEP

6144:lnNhR0RO+BeaenG8IAVCNhtyLry8SWY84f+OmvWstcXNyqDkB6hG:Vhcen/INbyLry8SE4f/otQYqs+G

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c7c21425d6dcce04c86a1ef76ad66ccec551a3dff0a14da88a7bce71ff2cc9ba
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 752KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1004KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ