634f3e87b66880f1a9e9a5ece4ffff29fe31d74c82080520b5f43b3b0aebec11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

634f3e87b66880f1a9e9a5ece4ffff29fe31d74c82080520b5f43b3b0aebec11
Size

136KB
MD5

0dcbc2b69b960ac8defb3efcbb876146
SHA1

c137dc601cd010e2468d8195fbb6dce74bbf5c5c
SHA256

634f3e87b66880f1a9e9a5ece4ffff29fe31d74c82080520b5f43b3b0aebec11
SHA512

f08c6b25b09dc7cc5207e02ed5f9e96797014987ca631744ec736a3a1416fbb104efad739627c1cb6660c41592d205eea0c9ddaf5c4989e5d6f85b87d64f4413
SSDEEP

3072:aMGwbUs/7EcrspfvjNFOaaz6CkZiXcPRMB7mz:lf78tvrPo6PisCFmz

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

634f3e87b66880f1a9e9a5ece4ffff29fe31d74c82080520b5f43b3b0aebec11
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ