c75e2e7102876d059d07d9d202c9e7f73ad6c14ce3c334a7a31cbce0d2144c13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c75e2e7102876d059d07d9d202c9e7f73ad6c14ce3c334a7a31cbce0d2144c13
Size

352KB
MD5

541881febb8e08c3797e69bb3a64662a
SHA1

4112af48f37f40f1a97810cb070375c12a374687
SHA256

c75e2e7102876d059d07d9d202c9e7f73ad6c14ce3c334a7a31cbce0d2144c13
SHA512

cacf0502c5c9dcc62884a825aa7008eb617b93d7b3624c750e01f7b26d914fd51658a632ba659a59e9203b32c98fb3d2edd8f0fcdc103127e9a64a5219dfdaf8
SSDEEP

6144:Zczhsnlcgy0kvaxiRbrcRpIKoaz+pTnQl5mbY1MvPNQWaETqOPkUeonlobLoS8:ZisXpnfKpbcmbnQn6qOPkQybLoS8

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c75e2e7102876d059d07d9d202c9e7f73ad6c14ce3c334a7a31cbce0d2144c13
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 341KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ