31da80ca2d57c855520319e036183cf199831b3b70f30e8a5b97f7d75a6905f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31da80ca2d57c855520319e036183cf199831b3b70f30e8a5b97f7d75a6905f6
Size

103KB
MD5

0044416df102ad4fc36363d4360351d0
SHA1

907c475058e1bfe38cdeaed8bc8e74336cd21585
SHA256

31da80ca2d57c855520319e036183cf199831b3b70f30e8a5b97f7d75a6905f6
SHA512

23f719577e3734c6eaca3b7ad2dedd0ed7114899053c38f5ee8d97f523e3d7984ac186ddee5c6729c2c2eec6b25724f6280f22e0b49569a46f50f204fb063eef
SSDEEP

3072:raFJB4sF0HetkLqwdsNpTO3DqNbmveISi3tf6:ruBJOeq+9NRZbV/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

31da80ca2d57c855520319e036183cf199831b3b70f30e8a5b97f7d75a6905f6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 224KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE