3ed1537967d2728193b10d2c48a1ad1be41edd1ef2cab89128680824ed5e952a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ed1537967d2728193b10d2c48a1ad1be41edd1ef2cab89128680824ed5e952a
Size

1.2MB
MD5

1caa64eea50874415dd0bcb5adf5dfa4
SHA1

e99726cc5d0876ce304d467fd440f0f665f7d435
SHA256

3ed1537967d2728193b10d2c48a1ad1be41edd1ef2cab89128680824ed5e952a
SHA512

6c11c95c5accff1e761d7fcf8b9f327b5db01cc45d66dac3e0f547dd7e4dfa471e16825f6e1d107dcff9cc5c81970a4cf49e35bf4e8b9c24e9f55c7fb1072419
SSDEEP

24576:wBfeKdb7joTwqsLRQ+6ZIJVJNHeoE8zTtFByzxeVsybfs:U33joUqyf6ZIJVzXE83tFBCeVK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3ed1537967d2728193b10d2c48a1ad1be41edd1ef2cab89128680824ed5e952a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 576KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 508KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 896KB - Virtual size: 892KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ