3dc4479707208d938ea003013c1fa28e0d1d3e1b93e1ea3289f2218fdcb928a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dc4479707208d938ea003013c1fa28e0d1d3e1b93e1ea3289f2218fdcb928a4
Size

461KB
MD5

1ddbfe3737e7274f0d49acdfbc5b6cf0
SHA1

2f061c826cc1361f9f87972e1f1be4d0c17a90b3
SHA256

3dc4479707208d938ea003013c1fa28e0d1d3e1b93e1ea3289f2218fdcb928a4
SHA512

222de9dd2e4b273f7f2944e01c30f55bfff2f45ff6ce6798f03f126e4b6d1bd4f5fcba7b8425f09cde0fc994e601d4ca4106d23529d47638c7fa42b22cc10bac
SSDEEP

12288:kf165GHVQUCh4WW32csFKun56ygT0oK2fy:+45GH+nOWWKFLn0ygTG2a

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3dc4479707208d938ea003013c1fa28e0d1d3e1b93e1ea3289f2218fdcb928a4
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 708KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YUPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE