d2e39926aeadd5c3856cf94713732d37572c70e803c241babf2ac021f4e79884 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2e39926aeadd5c3856cf94713732d37572c70e803c241babf2ac021f4e79884
Size

381KB
MD5

c8b300ba5975a7b648a2e7efc1c139ad
SHA1

2c76a52a52850bb0f1f2446c0e4f2c188b88ca45
SHA256

d2e39926aeadd5c3856cf94713732d37572c70e803c241babf2ac021f4e79884
SHA512

cdf3aee17a578240278f9da14b14c8afd8c783cbc676b5d038c7f882ac0ab1225c154eeac0d88155ed26baf5910c80f55355c553c837a0d7d7825371c588a0df
SSDEEP

3072:5Ytuqz6DWBAIJhBRn/8Xxvu5frWy28r1zxx1j3AGE6RvlSu:q4qzWWWGn/IMf6yTRzF35tSu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d2e39926aeadd5c3856cf94713732d37572c70e803c241babf2ac021f4e79884
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ