c1b4e8bb78a6ff1edb10fe8dbb26b907f3bf84664d4a821d5a4b4a07904a79a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1b4e8bb78a6ff1edb10fe8dbb26b907f3bf84664d4a821d5a4b4a07904a79a0
Size

29KB
MD5

0809087add0f95740badebc1b52b1070
SHA1

54318a201525fe2bc45259e3a265f9599ac7489f
SHA256

c1b4e8bb78a6ff1edb10fe8dbb26b907f3bf84664d4a821d5a4b4a07904a79a0
SHA512

eb1a2d6a2bdc64e8148a36d44d5ebdd4c13af4189bc3141ffc36cbf1a67d508f63f856a670b9679bb3780fa8cddf597f9c434c061390e4739aa3656cf57b286c
SSDEEP

768:4C6Q8Et4HO6BBI6YExfRvtg4HFTqjXAhTg:z6Q8Ett442R1xH2XAZg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c1b4e8bb78a6ff1edb10fe8dbb26b907f3bf84664d4a821d5a4b4a07904a79a0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ