332bedd0cf02911e9a4b9b91821fdb317cbbfec4e9142f48408d7478cbca7927 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

332bedd0cf02911e9a4b9b91821fdb317cbbfec4e9142f48408d7478cbca7927
Size

2.6MB
MD5

ce7dceba5de8ada6010168bbb8d351dc
SHA1

da5ab9e2d87e72eca1b7d6bdd3ec30de794322c9
SHA256

332bedd0cf02911e9a4b9b91821fdb317cbbfec4e9142f48408d7478cbca7927
SHA512

ac650f03f292dca554103140809862d949bd9d4928d8bcc494f01e3755158d33d1528a5a7169aa008daffb284005f9b9258272a616aa7c2d491ca4e7ac077be6
SSDEEP

49152:0sx+x8qss+SREndkbZVYL+FENy+b9DeAhvvKrhGQAW2rx1BF0xM+POtjxLFkp:1aZmL+CNTdTtKrbQDPxgcA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

332bedd0cf02911e9a4b9b91821fdb317cbbfec4e9142f48408d7478cbca7927
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ