c9c8582f6c3d2f18af3e45c811f9100badb9bb61e802973468e3f91de5ec2182 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9c8582f6c3d2f18af3e45c811f9100badb9bb61e802973468e3f91de5ec2182
Size

141KB
MD5

5c075a2183a331c5ec6f432c04f2afac
SHA1

a84781d02e51d7c786daba85de64365903a9c9e0
SHA256

c9c8582f6c3d2f18af3e45c811f9100badb9bb61e802973468e3f91de5ec2182
SHA512

042bcfcf098aa835c2903d502828f4c1a1bdf7b4894a85ca935c6ff2a8c1f6f9234cdd75044e2961f3d3f1cad23aa7fe580ebd208a8618d6ad253f29c7575945
SSDEEP

3072:HlK3VscNOO6q1W/x4L3eAeFrCERiIC4V2l0+hgb1zilxd+y0JWG:43VsUOOm/qeAIVl7ol0+h8Sxoy0A

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c9c8582f6c3d2f18af3e45c811f9100badb9bb61e802973468e3f91de5ec2182
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xys
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE