c9cffea235b8f53dbc4853e22f2bff90b26117fac8deb15ce00914f790a21e1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9cffea235b8f53dbc4853e22f2bff90b26117fac8deb15ce00914f790a21e1c
Size

104KB
MD5

977b2f4d0a357e2d2f5c27e203acd0a5
SHA1

861cf4acd337d470d95c94f72603db5e8e96cc5b
SHA256

c9cffea235b8f53dbc4853e22f2bff90b26117fac8deb15ce00914f790a21e1c
SHA512

e2aba158cbb6ece393c9f89c70bc57a38da97dddc41836d997d00fd71b25ded89899171fc93f7b7869e3c99fe52135a27b8d322592e3ab07b7840ed203844d7b
SSDEEP

3072:R6lGHMj/qPL+/ZhJLbTe2Oa0f2jAjPmay7tw:Qw4CPLWbTecWrjPp

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c9cffea235b8f53dbc4853e22f2bff90b26117fac8deb15ce00914f790a21e1c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 248KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 332KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ