a3e8d5aa41d00b413efc9952aa933d3269b2100026a992bdd42a2fd4cc1aa94c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3e8d5aa41d00b413efc9952aa933d3269b2100026a992bdd42a2fd4cc1aa94c
Size

118KB
MD5

1e73078ae14d7696e9c4d554e45fd980
SHA1

9b21f5d6e8d246cf9f9d3ed3b199100c95ce8260
SHA256

a3e8d5aa41d00b413efc9952aa933d3269b2100026a992bdd42a2fd4cc1aa94c
SHA512

694a8bf9366e1ca6f04b3487e8a6f633c81f6965b7227816242dc0223ed3eacebec598014f3dce78b60335696c7265e2e284cee8656d06ea3c10c841b50fc3cf
SSDEEP

3072:TBeCO+eZVViw+dcjBv6+FY9QcKmROxGmSc5yqj:T0CO+e/ZxjBvHFY9Qc/VmX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a3e8d5aa41d00b413efc9952aa933d3269b2100026a992bdd42a2fd4cc1aa94c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 115KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fei0
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ