2cdd34fe161c3ef8ba5f2030767f597733c7aabae6c041db81e7cd261daf51e5 | Triage

Sharing

General

Target

2cdd34fe161c3ef8ba5f2030767f597733c7aabae6c041db81e7cd261daf51e5
Size

324KB
MD5

ad2c915d69c3c804e5c73985f077dadb
SHA1

ca45fe73af13a461cc2bb3954b278faaf10f8879
SHA256

2cdd34fe161c3ef8ba5f2030767f597733c7aabae6c041db81e7cd261daf51e5
SHA512

b6f03f1ad98a8a4cfc64ec7152c6533869ba060d28cf7a55a70fff54e9bcb667f9be91f806bc898760598d3babcfa5924e4a3c85c2449582d8e99191e8e2c4dc
SSDEEP

6144:hPXEckZPC+CJq52imC24QafvaxZR00eWJ8G9TCG:h/1kJaq5cT4QaKy

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2cdd34fe161c3ef8ba5f2030767f597733c7aabae6c041db81e7cd261daf51e5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 282KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ