3df35d8fb5c648e40bd43e66f7f8b74092d1f76679a54e3ac680ac00eaeefffc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3df35d8fb5c648e40bd43e66f7f8b74092d1f76679a54e3ac680ac00eaeefffc
Size

248KB
MD5

9221d94eaed9b8182bc0455bf8bf3732
SHA1

a7ca181e55f00ecb89321e3de9267e7dc096bdcf
SHA256

3df35d8fb5c648e40bd43e66f7f8b74092d1f76679a54e3ac680ac00eaeefffc
SHA512

6d9799eba19732bc6c9b05422828ba85f9cd3418b7ef46cbe3ff9f9497a320f86540c9b35f63693237c97e336eb836384ade25ff45a129d9c19c1c64b037cfa9
SSDEEP

6144:Eeae+33z0+7eXKz6jIexr6nh4H3APFrjt7CvMKLe:hCjh4KGjIIMQuRZCvMKLe

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3df35d8fb5c648e40bd43e66f7f8b74092d1f76679a54e3ac680ac00eaeefffc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ