7346631f066e014e2609007370997918c3de932f7d5bbdf16fd16f6005ba3c03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7346631f066e014e2609007370997918c3de932f7d5bbdf16fd16f6005ba3c03
Size

104KB
MD5

65d3afb18e7ea1c71c58132c16fb3a17
SHA1

e56735fb4173db63468b6c2c8ed726fdff959400
SHA256

7346631f066e014e2609007370997918c3de932f7d5bbdf16fd16f6005ba3c03
SHA512

3968d7ac97714c851111b34bcbdd9b42273a6ae2fdc56a65a05fb702eda9461ebd5b83b474d863cbfaf4af88ef0f1f4a88ac7e8b0eeeb64b332a8c5e93d25c24
SSDEEP

3072:ZDIlVdn3roPCH28wJ4P1xkZkNAytNJE5outr:Z0X3roPCH28vLkZkNAy/JE5oS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7346631f066e014e2609007370997918c3de932f7d5bbdf16fd16f6005ba3c03
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE