4e3a2fe71dc4a058692d153f9621e9ed71ff43889c4f4130aa956224864c4d03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e3a2fe71dc4a058692d153f9621e9ed71ff43889c4f4130aa956224864c4d03
Size

69KB
MD5

7bb7823fe5d13e4f512b58a3c3e8c890
SHA1

8e53b7b0b8a33cc67b0456c50b2f3caf6000ed7b
SHA256

4e3a2fe71dc4a058692d153f9621e9ed71ff43889c4f4130aa956224864c4d03
SHA512

3408378abcbe4567201186b95cf67abd54f1b37d3b6924a81586a46fa92ef2c099556b7c16dfdad8a1badb14e4dd9ea1c6fa2b50ef512dce565fb16ba77761c6
SSDEEP

1536:3Zlsp83IS+7Ta9Rw8DmvspdSNxjTOWbuEcCDp:plspeIV7WLfqbjLLcq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4e3a2fe71dc4a058692d153f9621e9ed71ff43889c4f4130aa956224864c4d03
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE