d3ba8889479b3b0afac56d98f86c549ef3215622aed55ef03f4e44b6c1774d93 | Triage

Sharing

General

Target

d3ba8889479b3b0afac56d98f86c549ef3215622aed55ef03f4e44b6c1774d93
Size

4KB
MD5

5fc35df2da85471ae646fac70a4ad034
SHA1

1f4d4ce628b2f0cc6de2c0ad2ef0de0fd68f6ad9
SHA256

d3ba8889479b3b0afac56d98f86c549ef3215622aed55ef03f4e44b6c1774d93
SHA512

414467fdbf80bfe30c2ca3c3855d85e4d2095c91f1dbe0cd0852ab930a5fa9c7e9552f6ec1eca224a8d8f473a7591e28ddac1533491b627bbeb62d281a3a6e71
SSDEEP

48:qTQyQxjZA8mren96Gh0o8tbGgGQmu0ISQw7PiV561N5MNqMAtkaoYh94p0qSeJYK:bbmr2xSo8tbDmXJV+HbNEtkaoWYThu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d3ba8889479b3b0afac56d98f86c549ef3215622aed55ef03f4e44b6c1774d93
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE