10bcc2247e4bd3cd4536ec5a3c244bf3167a1a43cefb0ad925ac2ac184e15078 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10bcc2247e4bd3cd4536ec5a3c244bf3167a1a43cefb0ad925ac2ac184e15078
Size

1.2MB
MD5

f191ef0d5a68a00dc5f4b7c5831639ad
SHA1

950d87ac468d10dee95605686479a4a4fa62500c
SHA256

10bcc2247e4bd3cd4536ec5a3c244bf3167a1a43cefb0ad925ac2ac184e15078
SHA512

7d19dc8e16b0d341741c4677141e0a598c97a61ca89d7df8c860815582e2fe968b9a5740fb4268dc5616e5b2c0593818b2aa39fa100fb95577d3b97c90d9fe82
SSDEEP

24576:c3qdBzNku+gM4ILHQ/Pq3TiZVVVtZUMWfoRcig68ymtkoK8iZn7E:PB9j5ILQu6VbUMWftiVX+kiWnI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

10bcc2247e4bd3cd4536ec5a3c244bf3167a1a43cefb0ad925ac2ac184e15078
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ