f003853d9ad013ffb80a6336306d0cda7fccc112316306dce4cc4a6b70dcb0f3 | Triage

Sharing

General

Target

f003853d9ad013ffb80a6336306d0cda7fccc112316306dce4cc4a6b70dcb0f3
Size

981KB
MD5

29da17f72c41072e8e6a78db6cb75ac1
SHA1

fb31ed56be1e3ef7e134bc2048d0066857c67a35
SHA256

f003853d9ad013ffb80a6336306d0cda7fccc112316306dce4cc4a6b70dcb0f3
SHA512

d091e7c6f54c55244feb4035d692c4d00367b85316a6ecc90492221a8fce3cc391213a7c7a5bc1b4f9a300f91dc6e5deb9f45f2918a78ab6f22165f2327b94d9
SSDEEP

12288:gO4OB06UOB03erQZb+md4w1Uaa4QpIys7b5W:COkOaerQZb+md4wmahQpObs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f003853d9ad013ffb80a6336306d0cda7fccc112316306dce4cc4a6b70dcb0f3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ