36271fe51629acfcbfc50285ba90459d53e492b7409da7c7276d191ac910496e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36271fe51629acfcbfc50285ba90459d53e492b7409da7c7276d191ac910496e
Size

113KB
MD5

5edb86526aefb13bb60b506c926769f1
SHA1

a234a20e47d8cee180dad85bc2763b96ca090aa0
SHA256

36271fe51629acfcbfc50285ba90459d53e492b7409da7c7276d191ac910496e
SHA512

7bf619fd7b7124203350344f986a958e29702d4177d6a17906ea190b1ebfc54ce1b7246f6bff1fd2c3c5805e311769c2fefcb4090328f5231f6f0b3e338a0415
SSDEEP

1536:GcQs+qUqziLZkvGh+xycUAMgWL5BJ+EGJwZUz8Mjq8PbncVnh2MrWzRPjEgzwF+H:nQJtqekvhzU1gWLEJwQrG8s2M01Ygq2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

36271fe51629acfcbfc50285ba90459d53e492b7409da7c7276d191ac910496e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ