c008a2325c730c38cb0a867e83924b066b2cb24d3d5d76930d95aed7d3a394fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c008a2325c730c38cb0a867e83924b066b2cb24d3d5d76930d95aed7d3a394fb
Size

28KB
MD5

eaa7091e6a06eaa05a4454eaff320165
SHA1

7c36aa8c3840bf0ae3e1569bfa3eeaf787742a80
SHA256

c008a2325c730c38cb0a867e83924b066b2cb24d3d5d76930d95aed7d3a394fb
SHA512

803945d05690c41c44d936e08468c3abe280e0b045b23b1ffea1ea8e3e4fb47aa177b970bc8d78c5777e50ce565e5a3cefc2ecd76c8da660fa7465b2c55e6661
SSDEEP

768:K3cT/xqKXG99w5vZ/4YzNJFo7LDc+LAfh7BC145:KMTxqKW99bozo7vc+LAp7wq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c008a2325c730c38cb0a867e83924b066b2cb24d3d5d76930d95aed7d3a394fb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE