c3a258bec2357e22e514c7a06f75242139c257fce36e63788ad29b84ec0b43f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3a258bec2357e22e514c7a06f75242139c257fce36e63788ad29b84ec0b43f8
Size

26KB
MD5

5f6c90b0a0a41ea827c0faa45e3a70bd
SHA1

ffea0e48d7eb3257b20e7fe080f6dd98079860e1
SHA256

c3a258bec2357e22e514c7a06f75242139c257fce36e63788ad29b84ec0b43f8
SHA512

6754e1b21e80227e4c4a9c5a0318fb0795cd1c5d2391f73a9e7b807f0f73ad5491b5b1a7ad93eb44ded88a8e520d5e5a83b26f842145734224be7b8499674962
SSDEEP

768:YnKsLuGK28XV0cRDqTlULtucj0OTdh3uCy:YnsGK2eV+ZULtu0LZuX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c3a258bec2357e22e514c7a06f75242139c257fce36e63788ad29b84ec0b43f8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE