331bbdf70b7adf4d11003da288f378d824a862e1fd11e1edce4144040bd2d1c1 | Triage

Sharing

General

Target

331bbdf70b7adf4d11003da288f378d824a862e1fd11e1edce4144040bd2d1c1
Size

387KB
MD5

90ed1dbb013d640b498b2a8c788c7610
SHA1

4aae0a6a8c5267a3f7696606b98a43829aa85253
SHA256

331bbdf70b7adf4d11003da288f378d824a862e1fd11e1edce4144040bd2d1c1
SHA512

b2d6095225f4c451cfa5641eda55eb367b3df6a4219f6d74e6bab4deaf00d7616c4603be630e5244c3c603ebdb33a01972a965c91911a9ddb0382a4d28728502
SSDEEP

6144:oHPwgxBZu/I/wSpy3wwXQ02lW8aGMeKhlEXg1OEPllntQrghEQbZwCRaouGiQwTv:04c/7MwwXX2wlshaFrnOrgFbCCRsn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

331bbdf70b7adf4d11003da288f378d824a862e1fd11e1edce4144040bd2d1c1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 354KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZC
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE