3376d75dcf8564ea016149be0dbe36c639d3cbf775d07c2e3f902ff299063b86 | Triage

Sharing

General

Target

3376d75dcf8564ea016149be0dbe36c639d3cbf775d07c2e3f902ff299063b86
Size

21KB
MD5

0157176b3065b4be1d399508c4ff8420
SHA1

cba446af47101c71de0d5bea436ca0efab3edf4c
SHA256

3376d75dcf8564ea016149be0dbe36c639d3cbf775d07c2e3f902ff299063b86
SHA512

265f9bf2856c3a916dc570f48d8e28d1a37ee0e322a74d10ff61d8f6418aa28760b048a53f3889be2f3d787639809aab7182e4ee08d2c198fecd363ff61a0c89
SSDEEP

384:8Y54I91IeMbDvzKIthWjrKpf/KQuk9aa6p/Y7L+EHO772IjT6D4VX:nO01SDmIth0OpqFk9mpgOEHOX222De

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3376d75dcf8564ea016149be0dbe36c639d3cbf775d07c2e3f902ff299063b86
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ