d32590e0b8ad0eb4bc2e99985df96ca2991e3191c6b8f94a9d9acc1c98cb0406 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d32590e0b8ad0eb4bc2e99985df96ca2991e3191c6b8f94a9d9acc1c98cb0406
Size

107KB
MD5

465027848d59e5c36b20fa9198ca6269
SHA1

f4f5f6b51328a77e96d8026fd302b1151ec911dc
SHA256

d32590e0b8ad0eb4bc2e99985df96ca2991e3191c6b8f94a9d9acc1c98cb0406
SHA512

04c5d825f661325135d8bee8cfe031d769b5ce3364d7f47c02578dc9a4e047363ddb40e70b51c537058f3137d7e998fbe09b4b2fec19d53f0d1f097d0c39a757
SSDEEP

3072:13me/YkpYYy9sVCbmyxk8GSc/qb8IRMDGoGQxoutCt4:12egkqpmoaXdSSqb8IRgxoS24

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d32590e0b8ad0eb4bc2e99985df96ca2991e3191c6b8f94a9d9acc1c98cb0406
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE