4dce208ba31eef80336a9dffc65a8a30a4e9dda967a6a609031af6c7f8d4c0e0 | Triage

Sharing

General

Target

4dce208ba31eef80336a9dffc65a8a30a4e9dda967a6a609031af6c7f8d4c0e0
Size

456KB
MD5

1a3a2b4a3e39677252b6ddbd3cde07d2
SHA1

aec31f82c6df48fd7a85093bee8c554749c233ac
SHA256

4dce208ba31eef80336a9dffc65a8a30a4e9dda967a6a609031af6c7f8d4c0e0
SHA512

4b25330580380a846dcef4e43a5264463c4bacab12449797f649454cc3fba7b5c6137866c6787b7d983ff6775f8332cb924af41306fb2eb0a6382aa9e8a63fb6
SSDEEP

12288:PMyS5Z5Z5Z5syS5syS5Z5Z5syS5Z5syS5H:P1K2eSs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4dce208ba31eef80336a9dffc65a8a30a4e9dda967a6a609031af6c7f8d4c0e0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE