c83faebb7960fdc05edd6c64a70abe4ce3cd8f7d9abfaa03e39880fa68706276 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c83faebb7960fdc05edd6c64a70abe4ce3cd8f7d9abfaa03e39880fa68706276
Size

264KB
MD5

84ba2b52b0a562488f3728aa95f938d1
SHA1

715fdc1c8ffa9b975f266bd5f3a236c8009e7e83
SHA256

c83faebb7960fdc05edd6c64a70abe4ce3cd8f7d9abfaa03e39880fa68706276
SHA512

05ebf547749826d0530147d6f1edb963d4d0db04609fb68bed9b068caa31eaf1b3a649a3338411ff879ef8398e24e00c73daa53ef28de95a35e97a66a615e98c
SSDEEP

6144:D1htXe9N3RlqclVUIDUIEs6L6yB+Ao5KyCZKnK8MK38Jse0XRc4Rsk:Dk9N3RlrlZDUIdnyfwXW4useGRzRsk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c83faebb7960fdc05edd6c64a70abe4ce3cd8f7d9abfaa03e39880fa68706276
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 416KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uro
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE