38b832a558196a3bf59615b576d55e8d2d836364d9e089cfbcbc97039bc2f268 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38b832a558196a3bf59615b576d55e8d2d836364d9e089cfbcbc97039bc2f268
Size

104KB
MD5

084c11dd1eeb2c3b16e1a1372c280966
SHA1

27a45e9a3c496f6f25fb7df995e08c3cf88edc0a
SHA256

38b832a558196a3bf59615b576d55e8d2d836364d9e089cfbcbc97039bc2f268
SHA512

ce25ea92e8d9ad72be45e6d6c42e17db34b952bf7d7599d02b94ec0f2b04c9ceadc077b58487b0e4b1342b0daba40a425f13e9e1612407cf06b5e309b9936c44
SSDEEP

1536:IW/06LjhVNsCBnnGfCYeNCbbO3sSid1DJ+UFzSHI/g7SBFnz++WaPPOoUox:+UxGfCYeNCbbQsR9sGg7Si+WaXci

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

38b832a558196a3bf59615b576d55e8d2d836364d9e089cfbcbc97039bc2f268
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ