b34413c24e2462a02456dda505c517bb47badb6882de4da0ec8df7876b9decad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b34413c24e2462a02456dda505c517bb47badb6882de4da0ec8df7876b9decad
Size

42KB
MD5

4686dd071f7af0bbdde711186eb980b3
SHA1

4449d1c5814835f48ce125e7176f9817b7ad01ec
SHA256

b34413c24e2462a02456dda505c517bb47badb6882de4da0ec8df7876b9decad
SHA512

eefaf4137183eee19fdec1e5cb8e5f76a3eca46f512339b20b1e8e21f3a8e1bc33b3b127df8768c75340e3119e392ce583ee0c684408bd7aa5444c4396afd1fb
SSDEEP

768:35UoPbn+/W250CSt+9fpMgdKhLQCHa+cU34BFxIfIA4qAFg07fz+XgBTNy7OZEpy:357K5mZk2g8UJUoOCjFgSfz+XEhyz4ZV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b34413c24e2462a02456dda505c517bb47badb6882de4da0ec8df7876b9decad
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ