36a666b6680641d64d6a80e43d8bb03ee731ed71ce1bd05639c25d2e2495fddb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36a666b6680641d64d6a80e43d8bb03ee731ed71ce1bd05639c25d2e2495fddb
Size

10KB
MD5

63025ce8802a02c439a478dea5b47877
SHA1

e39006ad3e4210d444c5ae9c1c0922e3471255b4
SHA256

36a666b6680641d64d6a80e43d8bb03ee731ed71ce1bd05639c25d2e2495fddb
SHA512

d5de5cc0e4860a57501313eb6e0361af5b5cfc831c1af408a76dc8dae1ce578623230eb29041fad9ff52bdb9a979ac6b63f0e121a2ebaf8d121db12ede96124c
SSDEEP

192:iYemOh0qxb6J7uKyj1g2S2xgzdsObl3krWcgRWOTw:iYeZ0weJ7uBYagplUrWcgRWj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

36a666b6680641d64d6a80e43d8bb03ee731ed71ce1bd05639c25d2e2495fddb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ