3afb312a3416ec5172c2e6286423cba9eb2560a9dbb94874821fe1de444e33a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3afb312a3416ec5172c2e6286423cba9eb2560a9dbb94874821fe1de444e33a7
Size

51KB
MD5

d0c842272a6b23dc78021cef0f5183f1
SHA1

7006322c589cdfe6945aec90263cd3d8152508c6
SHA256

3afb312a3416ec5172c2e6286423cba9eb2560a9dbb94874821fe1de444e33a7
SHA512

261a50fe5465930fef8a9300feb9e22f52196011325ef114debc02317534fabdadaa93d986afef981c874e989144771b04a71f1a6be5ac98404824bb3a5c751d
SSDEEP

768:rCPcc88I0zgNK8YTi6jMUGjpZItd61pik1NH9xKH/CHcTmB3CDNqgHH+IHgapUs0:rOrUhkiJh20T13aOyhN+yP10

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3afb312a3416ec5172c2e6286423cba9eb2560a9dbb94874821fe1de444e33a7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ