b36330f56752e5bbb92e7a4f6e50e01244421e032fd71712c72229fa69e50e20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b36330f56752e5bbb92e7a4f6e50e01244421e032fd71712c72229fa69e50e20
Size

242KB
MD5

99997b3f9fc5e52dcf246fb9a08ff644
SHA1

d02e19de56f12c1cee1385684972347864345be2
SHA256

b36330f56752e5bbb92e7a4f6e50e01244421e032fd71712c72229fa69e50e20
SHA512

cf7d57df1d2d8994019f1cbb2fc177b18e39ab2aff72ed60d79534459907b431b1e76459ddbad67b4ddf626b1dfb2ba4cb3a1d90fbea7455a412bb8b3cdcc63f
SSDEEP

6144:c/svPpryToF+qEN1jVz3EpQ2GbIL7mfogrMhapc:c/svPhyPN1JUxGMEc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b36330f56752e5bbb92e7a4f6e50e01244421e032fd71712c72229fa69e50e20
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ