3e147d20b8b5594011ce633f429e98a10c7e4b530fc129423a7a893eed750853 | Triage

Sharing

General

Target

3e147d20b8b5594011ce633f429e98a10c7e4b530fc129423a7a893eed750853
Size

22KB
MD5

6195f819c9a44ff468198adcb2e7ebd3
SHA1

cd60177bf653c7b4148497e9c7aab6a4ad9457df
SHA256

3e147d20b8b5594011ce633f429e98a10c7e4b530fc129423a7a893eed750853
SHA512

a57fedf6f88e44f2e736c364255e2f1076e9d47fc6a451f32af985d6ec69ac4cf0cad7bdeceefbbcdd7d61d743833fce4cb0c947fbc125e208922a39f1ff2a08
SSDEEP

384:OEtOfGiLwIyYBMihAiiP+LJfCP4BK5thTRcs6i+N5UXKg+:7tOfG6/yYBMihAHPU5CP5jRcM+N5Uj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3e147d20b8b5594011ce633f429e98a10c7e4b530fc129423a7a893eed750853
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ