35e3c2744a91a8fc597fc4c7c686c69ec30ac717dd7117892f7ff2d3745357ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35e3c2744a91a8fc597fc4c7c686c69ec30ac717dd7117892f7ff2d3745357ae
Size

251KB
MD5

0eb8b89d96ee751338adbaf48a2c0de0
SHA1

dc1c824708455fa6a22cf43b65df809633311913
SHA256

35e3c2744a91a8fc597fc4c7c686c69ec30ac717dd7117892f7ff2d3745357ae
SHA512

a0d47a8e4551cf1637496fa1bf318dcbed2220f3315eff344a733601898dc524a9db2fe3d33ec6b28411533a9ff08bda2e8718cb4c2650756dfff63fae96aba6
SSDEEP

6144:CyT4c9fGwbBF8MJV4BYfpH7T/WtiMbGM/OQaAQSR9:nf178MTWYfpH7TetnbN5R9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

35e3c2744a91a8fc597fc4c7c686c69ec30ac717dd7117892f7ff2d3745357ae
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ