31b58d0fa24e6e2b76c449f900ec6f9a4b2b8ee159d85ce8c72d1f1adcb1ef64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b58d0fa24e6e2b76c449f900ec6f9a4b2b8ee159d85ce8c72d1f1adcb1ef64
Size

427KB
MD5

9c3f608557c2539662cecf5078842684
SHA1

66c4ab277d323823ed38e23adc7a42553a624f1a
SHA256

31b58d0fa24e6e2b76c449f900ec6f9a4b2b8ee159d85ce8c72d1f1adcb1ef64
SHA512

2d2f0506329054a6959ce3c6e4153e6738117bbad5e646134babd288fa7a049c6d6e45c86690702ab2a62112da5634c0f4eb94c96aef116e1b55ed22228437da
SSDEEP

12288:aExkE/XExkEBRTS68mnZHjaUvQCsvcU48NUw:3/6SmAxfSw

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

31b58d0fa24e6e2b76c449f900ec6f9a4b2b8ee159d85ce8c72d1f1adcb1ef64
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 290KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA