a3d9936ff98f2ec3674e8562be304c083be4eba701f2205d588cf7e2c0f0e4da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3d9936ff98f2ec3674e8562be304c083be4eba701f2205d588cf7e2c0f0e4da
Size

302KB
MD5

4899e42f44d34272e76a1bb719dc3ab2
SHA1

83de96aa53c9ea3b81429e440cfc526412cfc07f
SHA256

a3d9936ff98f2ec3674e8562be304c083be4eba701f2205d588cf7e2c0f0e4da
SHA512

1e94cec6fae633de692bdb7700fd98d0af773b3e1f38afc6254f33b44f01b90405c200fc6ba99a8329b61a63a5d53848cb452676db52930e997c7a293de2ca52
SSDEEP

6144:lnNhR0RO+BeaenG8IAVCNhtyLry8SWY84f+OmvWstcXNyqDkB6hj:Vhcen/INbyLry8SE4f/otQYqs+j

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a3d9936ff98f2ec3674e8562be304c083be4eba701f2205d588cf7e2c0f0e4da
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 752KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1004KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ