3fe10c83a790a8943f57c3693950dbd8d4dbf23036ac8c8ef2c6d76a20561553 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fe10c83a790a8943f57c3693950dbd8d4dbf23036ac8c8ef2c6d76a20561553
Size

1.3MB
MD5

4e7fd27f5831dad09fa8a350f2d4b324
SHA1

b3fda1f493e143f9304e473bef60e56df3e97f78
SHA256

3fe10c83a790a8943f57c3693950dbd8d4dbf23036ac8c8ef2c6d76a20561553
SHA512

fbb3180b4f7d3c892ef35e8e3065190082b58628b10a0651ba9e7c4b2c34341499eec0e8213b136fe073d824b1e499e9b3412732e9a667caf99d059fe45b0f6a
SSDEEP

12288:gO9BsgawOeBsgawOeBsgawOeBsgawOeBsgawOeBsgawOeBsgaNqK4:XBsHUBsHUBsHUBsHUBsHUBsHUBsHAK4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3fe10c83a790a8943f57c3693950dbd8d4dbf23036ac8c8ef2c6d76a20561553
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ