d3def92f5723e7e933db3d98022f699b69238ece2269cc0c1bc71f788a79072d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3def92f5723e7e933db3d98022f699b69238ece2269cc0c1bc71f788a79072d
Size

81KB
MD5

6fc33d163347d9876c9b96e0f67011a0
SHA1

e2d73de6a3989e74dc738f08279a4481c86cd5a1
SHA256

d3def92f5723e7e933db3d98022f699b69238ece2269cc0c1bc71f788a79072d
SHA512

6c9f5df583958dce7eb9d2ed85fbb57e11ec7727237b0c0582cc6a7ce07b53556b1c11967f4f4623257bf1c5f8109e4b64dfccaf313ed5fbe281ca3164352251
SSDEEP

1536:eUO4wIlDdJriegU/RNdxkUBWQoqsNDRwQqR3BpSW9Mc2+iVgR/FLPUrwYki3:vzPZRN9oOs9cG26+uc/FLPU3

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d3def92f5723e7e933db3d98022f699b69238ece2269cc0c1bc71f788a79072d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ