ca2a768851308b86d67aecd70f093245b1ba7fd115148fc705b370e19da1bbad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca2a768851308b86d67aecd70f093245b1ba7fd115148fc705b370e19da1bbad
Size

573KB
MD5

5f4fe1079ba8950ad06dd695a0a84337
SHA1

1e61a1418153fd3373d6ff634743fc2e0cc3f0b6
SHA256

ca2a768851308b86d67aecd70f093245b1ba7fd115148fc705b370e19da1bbad
SHA512

1c7a70beaa6b85655ca16d785360fc2132386416a3a392b5dcd6c40bf37dc2e084fcb310759b74d75832b14d1045d7d4e9b05cf26f55f28c2b9abf427ce01166
SSDEEP

12288:gTfb6qV8O2NQkoWIKXat9LRdasEXpy9obsCbue/B73YT:gTeO46WIKqt9tgjYFe/JC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ca2a768851308b86d67aecd70f093245b1ba7fd115148fc705b370e19da1bbad
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 546KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ