d3194befef28dd29f3c769c043830eea34a31d3cf90d2c1d57d3b6452d9c0d8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3194befef28dd29f3c769c043830eea34a31d3cf90d2c1d57d3b6452d9c0d8c
Size

68KB
MD5

dc042faafe426b019389cc492a4b979f
SHA1

8b8677634758838c8293e3c434248aa7d704bab9
SHA256

d3194befef28dd29f3c769c043830eea34a31d3cf90d2c1d57d3b6452d9c0d8c
SHA512

95d5f07be061e2eb24a715b8dc1ece5d42a1c673af14786dcd26341c8c0721622f3f7b84b69e92b5e54067d11193baaa745af807d512ba5370eb042ccc5e104b
SSDEEP

1536:IdWOmdGxncMtM7AqAaUktfehV5bFUjyQozJCN:sbmnMtMsBzkcbbejBodCN

Score

10^/10

upx

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d3194befef28dd29f3c769c043830eea34a31d3cf90d2c1d57d3b6452d9c0d8c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ