2f2cec8805a1b15ed4941dd327954bd7bd0734317a241a3fc5dfda2291ccb924 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f2cec8805a1b15ed4941dd327954bd7bd0734317a241a3fc5dfda2291ccb924
Size

293KB
MD5

b3f7f9e3121da2b31426dc95325e51b9
SHA1

57316046af23ee5005ddbec5eeb44ab5ad5d0c20
SHA256

2f2cec8805a1b15ed4941dd327954bd7bd0734317a241a3fc5dfda2291ccb924
SHA512

68f1a485a26ffb63845912cb57e531e924c0cb07ede801171a65702a19ab81bb9858ee8c44e6badbb6945aa74e9a23e07761eb1606492458a8c682a57d5dc34f
SSDEEP

6144:41gLtV5njZBOSye/ngBsUXduGkJQTJ+SQIM0OTbIUrLFTjFFp:ywV5nj7GeZad+C9QI9GNJ5Fp

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2f2cec8805a1b15ed4941dd327954bd7bd0734317a241a3fc5dfda2291ccb924
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 652KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 564KB - Virtual size: 562KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ