3cd4a57a55d088f96d8208a7bc1c77d3a500ba578636ea8b846369f0773fcd5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd4a57a55d088f96d8208a7bc1c77d3a500ba578636ea8b846369f0773fcd5a
Size

267KB
MD5

a28585bc5ac4534b8eceb814d35c0d49
SHA1

afb44727d749a243722e9f83771c9ede53426d9c
SHA256

3cd4a57a55d088f96d8208a7bc1c77d3a500ba578636ea8b846369f0773fcd5a
SHA512

16a9d6e2a0e7302ab0792d3a3ed428c315a66e66bfa0e912541d9b369508adb1ba1b42dbfc63803a83afaf1475de6cc484cd707aaa76d8dc8ca4e60717264013
SSDEEP

6144:lD2ZRwN3TwVZG3A8wpNED6Tn4Dv2feP9L33ueDQBz:lD2MNjw7GwHvTA2feP9L3Vg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3cd4a57a55d088f96d8208a7bc1c77d3a500ba578636ea8b846369f0773fcd5a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ