30d6d6b329b1f51fa45c3b8c3efaca1ff0470549c0584a0e18fd7ec61928740d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30d6d6b329b1f51fa45c3b8c3efaca1ff0470549c0584a0e18fd7ec61928740d
Size

132KB
MD5

67f37bc5cbd96f821254fe50819a8bfa
SHA1

2f5830b6288fa9fac8dba5c809843da2eeacb52a
SHA256

30d6d6b329b1f51fa45c3b8c3efaca1ff0470549c0584a0e18fd7ec61928740d
SHA512

be131d04c9d5a41541be4a5640c060a4ba42ba4bb7c1147ab0bb7be88b9e088c79112b1db3c81fd725d5ce9fc3f425ee5784538cacd2019bbf6a9d904043ba7d
SSDEEP

3072:Sy33ORF9stpk6JKRjoc795uqiQX3vvIUvwDT5u:heek6JKxoc5IqF3hIDT5u

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

30d6d6b329b1f51fa45c3b8c3efaca1ff0470549c0584a0e18fd7ec61928740d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 131KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ