fe52ab34591d311c5db0a126b5d4d9d567f83e737532ba7c5214a7b57ccb22d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe52ab34591d311c5db0a126b5d4d9d567f83e737532ba7c5214a7b57ccb22d3
Size

1.0MB
MD5

3d4adbb5fb8df6034ccaac98a840b4a4
SHA1

ddb95ca381d5e699fab12e38d247d9d6dea81baa
SHA256

fe52ab34591d311c5db0a126b5d4d9d567f83e737532ba7c5214a7b57ccb22d3
SHA512

9ecf676d28819e77983d70dd0ec24274c4783f4a365a6f3410f9ee6d399963be433e2fb9cd1fc5c6b623712246cf16e31ac015c955646c981725be604536f39e
SSDEEP

3072:ECQNf9RNHebjpreftg32lQ8NnWfjwtvOe3RpvaVzg/flzmfAQeWaRbvJEKvAflrY:Cxb1E7n2Dd43ChEQVb3V/y4kuzdp

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fe52ab34591d311c5db0a126b5d4d9d567f83e737532ba7c5214a7b57ccb22d3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 680KB - Virtual size: 680KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 283KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE