3cd374010ab6892e3e047a74c83419226b35ec5c6a0a6e8c5c4f47955d1a88da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd374010ab6892e3e047a74c83419226b35ec5c6a0a6e8c5c4f47955d1a88da
Size

66KB
MD5

67345fba0ebce21107ed8bbd43fb4d4f
SHA1

fa33716260c282e156fee4e08eb40696da1b65be
SHA256

3cd374010ab6892e3e047a74c83419226b35ec5c6a0a6e8c5c4f47955d1a88da
SHA512

332f725199cce33c86101b8243f4b456b8610bf7d49ebb9bb6b961da516f6c44ec77ae666a6c2c28dd380988aba0125d3a80a4a6a30b6aee4599d5df21284ae5
SSDEEP

1536:Ijps9qWF+OFLqpdKSkrBrxB7GUjhOgiu42tAnnMj:YpYq2BOpdJkrHByUjho2Wn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3cd374010ab6892e3e047a74c83419226b35ec5c6a0a6e8c5c4f47955d1a88da
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 487B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ