3eb7ec5b00819e708c1ad13ab5b0a0797e2f7b313b28eeca92d878d7c3820d55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eb7ec5b00819e708c1ad13ab5b0a0797e2f7b313b28eeca92d878d7c3820d55
Size

580KB
MD5

0f87efa7cd8a988ecf0cc2fa1dc8670e
SHA1

546e756711f40b868ee040497bf062718168616b
SHA256

3eb7ec5b00819e708c1ad13ab5b0a0797e2f7b313b28eeca92d878d7c3820d55
SHA512

f15e9d8044ab0e49031ecf08321024067dbdbc74acc0116d512abf2476da7b8537a317be95580951916913ea3cf0a9fcca618f47010c1e58e4803ba3ff78a570
SSDEEP

12288:iuOFaxMh3Orl8/NZF0pJO/MYRcrBkzwqk1Nch8odvq3H6vqh:nDrIypJWGC3kTIgavk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3eb7ec5b00819e708c1ad13ab5b0a0797e2f7b313b28eeca92d878d7c3820d55
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 499KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 816KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ