a30f34347d555e59ba502c5a59b898ab5863abe97a41879af1949e9bc6e224bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a30f34347d555e59ba502c5a59b898ab5863abe97a41879af1949e9bc6e224bb
Size

72KB
MD5

374dea1d8e176ce2d2d4838de0e8f4f0
SHA1

646bfd33dcc8e16ad3b9d44d35bad84869b2da26
SHA256

a30f34347d555e59ba502c5a59b898ab5863abe97a41879af1949e9bc6e224bb
SHA512

e5fa0d3798517f2b9d0fb9458a681145283251e08f679b6cae62c191e80f2664e44b44b5302c777ddf6cb80b64d8ce5fc1acc2f9c56dd2a025ae38e8afcf2ac6
SSDEEP

1536:S7qnkAQtSaoGo5n4iLG0/WM6TrHSaYqeyMjxp:rCSjGoLpWM6FBMjxp

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a30f34347d555e59ba502c5a59b898ab5863abe97a41879af1949e9bc6e224bb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX
Size: 238KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE