1C08A78CB745588D4D69A5C4B32DDF0A[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1C08A78CB745588D4D69A5C4B32DDF0A.exe
Size

2.7MB
MD5

1c08a78cb745588d4d69a5c4b32ddf0a
SHA1

d6e8b50b921d90b6c514d0c6c938b5da5660cfc7
SHA256

2e165b6264116cd577e0a02a2e703f88e2ce632f2944f1694a0daa687a036b05
SHA512

7ae001fe2c35d7456969524331b0d8297e901a457fc319cfa8b319191ce4cfcbc4d30b8c853ed45a3b1295e7a330e42d127bd90c92461c1e5427b58430f57aa9
SSDEEP

49152:luZQgyje5ZCWobrjrjQMdEIkGiwoJP82Chd5k8H9noftISLj/BERzMC:luyC57obZdEIpiqlHBoOSnK

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

1C08A78CB745588D4D69A5C4B32DDF0A.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 4.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 467B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/18
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/30
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/43
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/59
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/75
Size: 512B - Virtual size: 36B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/94
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/106
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/117
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 4.6MB

UPX1 Size: 2.7MB - Virtual size: 2.7MB

UPX2 Size: 512B - Virtual size: 4KB

Headers

File Characteristics

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 188KB - Virtual size: 274KB

/4 Size: 512B - Virtual size: 467B

/18 Size: 423KB - Virtual size: 423KB

/30 Size: 163KB - Virtual size: 162KB

/43 Size: 106KB - Virtual size: 105KB

/59 Size: 134KB - Virtual size: 134KB

/75 Size: 512B - Virtual size: 36B

/94 Size: 1.2MB - Virtual size: 1.2MB

/106 Size: 844KB - Virtual size: 844KB

/117 Size: 230KB - Virtual size: 229KB

.idata Size: 1024B - Virtual size: 882B

.symtab Size: 371KB - Virtual size: 371KB

UPX0
Size: - Virtual size: 4.6MB

UPX1
Size: 2.7MB - Virtual size: 2.7MB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 188KB - Virtual size: 274KB

/4
Size: 512B - Virtual size: 467B

/18
Size: 423KB - Virtual size: 423KB

/30
Size: 163KB - Virtual size: 162KB

/43
Size: 106KB - Virtual size: 105KB

/59
Size: 134KB - Virtual size: 134KB

/75
Size: 512B - Virtual size: 36B

/94
Size: 1.2MB - Virtual size: 1.2MB

/106
Size: 844KB - Virtual size: 844KB

/117
Size: 230KB - Virtual size: 229KB

.idata
Size: 1024B - Virtual size: 882B

.symtab
Size: 371KB - Virtual size: 371KB