af3d335b2d9c35f93556decaf1f1ddb744d13364dbac2497a0fc40f8b2180133 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af3d335b2d9c35f93556decaf1f1ddb744d13364dbac2497a0fc40f8b2180133
Size

917KB
MD5

849ccf5d6b9260734ae366c5930e2820
SHA1

b4b9186110111b8db77d6fa42b13171346bdc458
SHA256

af3d335b2d9c35f93556decaf1f1ddb744d13364dbac2497a0fc40f8b2180133
SHA512

dd2e6da293a1ce78f8c965b6bbd6f19ec671e6f5b82513da5152a096699a7ce93edfb873d889f59e3159595dabfdb874ab734690200b343368c15628d57bf4a0
SSDEEP

24576:vq+DhX7O+EqiOm7GEn6Oi4B1t+tUPciowo:BX3pm7iOiu1tcxiow

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

af3d335b2d9c35f93556decaf1f1ddb744d13364dbac2497a0fc40f8b2180133
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 968KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 893KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 656KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 788KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ