3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6 | Triage

Sharing

General

Target

3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6
Size

129KB
MD5

0a0df2cad0ff7cc3a7879654d6b3c06c
SHA1

48dd2b67b514cb3b8b51e1c13d437d1a39cfce17
SHA256

3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6
SHA512

f4bd68dfedfcf5dbe9db97c009c07f86bf11faa8a8631d7c9d873c5ac43852b1ee196a7e5f4eb08db331f9a7e72acdad64399e866206824392a8560e53a38cb1
SSDEEP

1536:8ET7XqHWQVeC6wRikLcWj9ycokOqR/+bZm9CqzxqVtK0phTI03lOOoJkfRuCkEEx:v7Xq2QVeCH9Bxozhzi0VcJkfR5E3a2t

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3a5ad49679efa697828aefd5bdb396739767445a9c8ae8e109766fbbde916ed6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ