b344b36a1a0287f0dc75e11d1f2dfc8438ce6c0937b6b53d0fb2fe41d5ba7879 | Triage

Sharing

General

Target

b344b36a1a0287f0dc75e11d1f2dfc8438ce6c0937b6b53d0fb2fe41d5ba7879
Size

282KB
MD5

054ad5b07f6eb862bf1ac051588ee130
SHA1

12e4f42623cb38bdb14d5c304b81ce8506972d14
SHA256

b344b36a1a0287f0dc75e11d1f2dfc8438ce6c0937b6b53d0fb2fe41d5ba7879
SHA512

c3e34a716774f7c030089c46db64787abe84df5190d8e736a286ec50cd8cd71195a1d916e47152afebb0c6891dfbd69cf91a8e70628d89e8badb3be277f7520f
SSDEEP

6144:4YZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO7BK:4SNC80I+cR3R03VseuOtK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b344b36a1a0287f0dc75e11d1f2dfc8438ce6c0937b6b53d0fb2fe41d5ba7879
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rol
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE