ce0002d32a1d725e6d6a926b5740f20f15ece7d86ee53c574b416f42aad0a4ae

Sharing

Copy URL Twitter E-mail

General

Target

ce0002d32a1d725e6d6a926b5740f20f15ece7d86ee53c574b416f42aad0a4ae
Size

2.4MB
MD5

208a493b09042edde8a7dba77b5e1d1c
SHA1

5fbe68b9d56662c49f0bf8fcebd0e685b376f549
SHA256

ce0002d32a1d725e6d6a926b5740f20f15ece7d86ee53c574b416f42aad0a4ae
SHA512

1f75aa6d4092ac6722a58a283c45dfe907a08df9c46feede2e31f8f64316f45feac09f58027d10565999d8bd516ce514721b15a31638e1460cece1db12170eda
SSDEEP

49152:LtA4t+dYGllUjqxIgAOTffEvCHlX2tkOQCmVb5Yj5EJES+oS05W:C4tcYuqqxnVfEvCH12t7QCmVb5Yj2JE0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

ce0002d32a1d725e6d6a926b5740f20f15ece7d86ee53c574b416f42aad0a4ae
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2345
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2341
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.21s2
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3121
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1233
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1233
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3232
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2312
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1233
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3212
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3122
Size: 1008KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ENGINE
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1232
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1233
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 36KB

UPX1 Size: 8KB - Virtual size: 8KB

.2345 Size: 3KB - Virtual size: 4KB

.pe Size: 1024B - Virtual size: 4KB

.2341 Size: 116KB - Virtual size: 116KB

.21s2 Size: 1024B - Virtual size: 2KB

.3121 Size: 32KB - Virtual size: 32KB

.reloc Size: 6KB - Virtual size: 5KB

pebundle Size: 8KB - Virtual size: 8KB

.pe Size: 1024B - Virtual size: 4KB

.1233 Size: 192KB - Virtual size: 191KB

.1233 Size: 3KB - Virtual size: 13KB

.3232 Size: 66KB - Virtual size: 65KB

.reloc Size: 9KB - Virtual size: 9KB

pebundle Size: 8KB - Virtual size: 8KB

.pe Size: 1024B - Virtual size: 4KB

.2312 Size: 465KB - Virtual size: 465KB

.1233 Size: 11KB - Virtual size: 17KB

.3212 Size: 170KB - Virtual size: 169KB

.reloc Size: 19KB - Virtual size: 18KB

pebundle Size: 8KB - Virtual size: 8KB

.pe Size: 4KB - Virtual size: 4KB

.3122 Size: 1008KB - Virtual size: 1007KB

ENGINE Size: 52KB - Virtual size: 51KB

.1232 Size: 28KB - Virtual size: 28KB

.1233 Size: 196KB - Virtual size: 195KB

.reloc Size: 64KB - Virtual size: 61KB

pebundle Size: 8KB - Virtual size: 8KB

UPX0
Size: - Virtual size: 36KB

UPX1
Size: 8KB - Virtual size: 8KB

.2345
Size: 3KB - Virtual size: 4KB

.pe
Size: 1024B - Virtual size: 4KB

.2341
Size: 116KB - Virtual size: 116KB

.21s2
Size: 1024B - Virtual size: 2KB

.3121
Size: 32KB - Virtual size: 32KB

.reloc
Size: 6KB - Virtual size: 5KB

pebundle
Size: 8KB - Virtual size: 8KB

.pe
Size: 1024B - Virtual size: 4KB

.1233
Size: 192KB - Virtual size: 191KB

.1233
Size: 3KB - Virtual size: 13KB

.3232
Size: 66KB - Virtual size: 65KB

.reloc
Size: 9KB - Virtual size: 9KB

pebundle
Size: 8KB - Virtual size: 8KB

.pe
Size: 1024B - Virtual size: 4KB

.2312
Size: 465KB - Virtual size: 465KB

.1233
Size: 11KB - Virtual size: 17KB

.3212
Size: 170KB - Virtual size: 169KB

.reloc
Size: 19KB - Virtual size: 18KB

pebundle
Size: 8KB - Virtual size: 8KB

.pe
Size: 4KB - Virtual size: 4KB

.3122
Size: 1008KB - Virtual size: 1007KB

ENGINE
Size: 52KB - Virtual size: 51KB

.1232
Size: 28KB - Virtual size: 28KB

.1233
Size: 196KB - Virtual size: 195KB

.reloc
Size: 64KB - Virtual size: 61KB

pebundle
Size: 8KB - Virtual size: 8KB