bc3a480d2546df80e4ca2fd2c408c0c372741630e980e0d6d2bc7b79415ee278 | Triage

Sharing

General

Target

bc3a480d2546df80e4ca2fd2c408c0c372741630e980e0d6d2bc7b79415ee278
Size

243KB
MD5

6ef3f281474a00ac28f90475d92bff86
SHA1

1014bfc9bf1d4a183d17ba4f2fb774b91ffa79ee
SHA256

bc3a480d2546df80e4ca2fd2c408c0c372741630e980e0d6d2bc7b79415ee278
SHA512

8fb59e596afbd529e84e6e96af9198c8b33b4617d8db90892747f1a3b0c00b35fdd5f62e5dabbf5944d2d905e465e3c3412e9e0c4414e942c9f4e5ce9068aa90
SSDEEP

3072:32RWAtKmpFwf0JXVvsbotwDeIv/y84XsqfGamm4OTcz7gI:32Rf46OudCeIv6zXOammw3T

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bc3a480d2546df80e4ca2fd2c408c0c372741630e980e0d6d2bc7b79415ee278
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UPX1
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ