a34720cc2948011de8ab6c0fa01be1ac8d8c54d440e13c8e40bd45b775eeaffc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a34720cc2948011de8ab6c0fa01be1ac8d8c54d440e13c8e40bd45b775eeaffc
Size

100KB
MD5

96ce39af237bef9eb94b5580b22dedcc
SHA1

ce02a6a3919b36086b88dbfc4ff94c1b39b8222f
SHA256

a34720cc2948011de8ab6c0fa01be1ac8d8c54d440e13c8e40bd45b775eeaffc
SHA512

aae35a195b3ccf429b35919c84c2486515ee353b657a4efd9c54277d2abb8ab37036ae5f38f6c8bcaecc4acf4c72981954530f9ac94d733c65d88379dda8bb80
SSDEEP

3072:BKQb4LcyiYGOE2MqoRFNT3zzoBxBYiZu0WF:oVfvPE2MqopzzoBXBIh

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a34720cc2948011de8ab6c0fa01be1ac8d8c54d440e13c8e40bd45b775eeaffc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 328KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ