34248ef3dada98b51b60f14777c660aa86b9da02ec1e76f41b110c613c8ae557 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34248ef3dada98b51b60f14777c660aa86b9da02ec1e76f41b110c613c8ae557
Size

41KB
MD5

1130fb91ec0fca7e81196d3635387e10
SHA1

80774431ead16a84e81eb6c669f9612ea2ee1f17
SHA256

34248ef3dada98b51b60f14777c660aa86b9da02ec1e76f41b110c613c8ae557
SHA512

068d57d38dd1295199a35cec92771c1b98b0e997ea8e0049b5f8eaa0b2fe9ce33c6606824b4e971170032ff26f08d5eec76800664fdea361ee05e177750e3a30
SSDEEP

768:OuNV/0UtHhOW5Ml27g8VkvriYlsS/L6A2FGJU+fqQFAFJTkgu5wiQu:O4uYhOWil8LYF/L6fT+fpFAJC5wiQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

34248ef3dada98b51b60f14777c660aa86b9da02ec1e76f41b110c613c8ae557
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ