36c4862bf584b03b16704359a253680d86c68392fcf0c30e9b73f75ae47c0712 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36c4862bf584b03b16704359a253680d86c68392fcf0c30e9b73f75ae47c0712
Size

142KB
MD5

6bb7565bf9ab2c0d14923d7a78dda843
SHA1

297d3e469dfb7b872fe40e49da9a3b83b9f740ee
SHA256

36c4862bf584b03b16704359a253680d86c68392fcf0c30e9b73f75ae47c0712
SHA512

5038b4cadba58fc979dd48da84a6d91dd868151f9cdbe1802a38374e97a02eeaaa1ca3ff7668a18469e880d5071bb1bd4da29b8aacc6f0ff2859096c8b0bfd0c
SSDEEP

3072:XSICa56T2BqL0FvzPIeJYg27TQWMuDTzyuy3JzaTY36xg:iICa56yBjieSg2QWVHW3Jz7q

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

36c4862bf584b03b16704359a253680d86c68392fcf0c30e9b73f75ae47c0712
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ