c4cc6580d4660f565db0c80de36ca1d676a0af7d28c5a2da880fa9a89263e3de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4cc6580d4660f565db0c80de36ca1d676a0af7d28c5a2da880fa9a89263e3de
Size

70KB
MD5

ad3c8249b6fd4d9f7378457ba847d5d3
SHA1

445b71232cad4c265e3f6d9bc3a7d0d01a2d9f81
SHA256

c4cc6580d4660f565db0c80de36ca1d676a0af7d28c5a2da880fa9a89263e3de
SHA512

88187f5cf371033c698f2b5b54064ee1830589a1ed81367b3527f2b575992af6020f6c06daf405475ea95712946d28f08f585b2de2daa342bdb76c162c939ab7
SSDEEP

1536:GZmX5xl1ssPhFkWjsg/mRZlUyVI2OJBDwmkqrXoJqigEvZ:4mXB1ssPhFkWYgoZJ5K9/lXJKZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c4cc6580d4660f565db0c80de36ca1d676a0af7d28c5a2da880fa9a89263e3de
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ