f3fa0c0d3c30d5b314aac0bd3b2be2c7e19d965e7af9bf0f0eb6f874d7b45b6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3fa0c0d3c30d5b314aac0bd3b2be2c7e19d965e7af9bf0f0eb6f874d7b45b6e
Size

186KB
MD5

c3a4796d9739e725f3ddc2cdc8edbadd
SHA1

dc61837c29ee646298ab726a9c4c79f66d9794be
SHA256

f3fa0c0d3c30d5b314aac0bd3b2be2c7e19d965e7af9bf0f0eb6f874d7b45b6e
SHA512

2487f292ef1e9d556db219aecb21dc6d7e3a282dff1a3177114cb754237568bae2d83f9ed83506b03be59304f4fa5ce6b794639a6b2b8b557b871f483c531983
SSDEEP

3072:xORCQcEoPFj1C4KYEXmjlOrnLr+nuRywFTHEiFtY66mRM6NBBZyPN:xICOoNj1C4KxXm2LZVZK668BYl

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f3fa0c0d3c30d5b314aac0bd3b2be2c7e19d965e7af9bf0f0eb6f874d7b45b6e
.exe windows x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 109KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE