d36cb059ab554abd891517dd620b603938ed6e1f162026c3e9440e91b2e23a3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d36cb059ab554abd891517dd620b603938ed6e1f162026c3e9440e91b2e23a3c
Size

8KB
MD5

cedb6b1484f98127305d8441c6eea91b
SHA1

7fc12efdf1c6ee8335316b6dc4f36f5e16bca76a
SHA256

d36cb059ab554abd891517dd620b603938ed6e1f162026c3e9440e91b2e23a3c
SHA512

40c4035431d6039b0922741136355d50d7e434de6eda1927936310af891c6af3e0b48c1429e780dabecff8f782e99abbf769f0b3e8c8bdaa5a5b90c2354700d7
SSDEEP

192:E+wGWN8O7XRBMOUjXoYPiUZqErFrHxKJ7AurjGh7GlDk:pQN8WBmUYPiUzrJcdbY

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d36cb059ab554abd891517dd620b603938ed6e1f162026c3e9440e91b2e23a3c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.test
Size: 768B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE