307bba159a7d0c30a5cc93c5c211344e5f45e252e006a4dcf3f685236e38402a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

307bba159a7d0c30a5cc93c5c211344e5f45e252e006a4dcf3f685236e38402a
Size

13KB
MD5

90bef04150da923ec1c2cbcb6d4c8e60
SHA1

75f832a8aa2a32113d2c78cd007ea98ce01c83ce
SHA256

307bba159a7d0c30a5cc93c5c211344e5f45e252e006a4dcf3f685236e38402a
SHA512

d1b2c0d60adee0e508da9ebd81d21ed1174d9e1826520b9020a56ec661ade6f31dc5384c6cec8f695e5e4a8ba9be05119d8b22bf62e586ffc0d2b8e0cd4b2f73
SSDEEP

192:Ry+1caixqbgVoV1nO7CvIZcPZbvKZpJ1nyTC1tPPPziafROFrqjC2AbRi5m/lh02:I+PV82OiIZcPZyfnN11Sv4+h0jzMsa

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

307bba159a7d0c30a5cc93c5c211344e5f45e252e006a4dcf3f685236e38402a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ