356418109b6500ee66960791ea8a5a9dd77ef1b3f4818d15d3684d2f796dab86 | Triage

Sharing

General

Target

356418109b6500ee66960791ea8a5a9dd77ef1b3f4818d15d3684d2f796dab86
Size

1.1MB
MD5

bf0f22c0a8be55c152da5c8b27a3041b
SHA1

a7454adc9ca7dcd5b5b01d62f00528c4a7684f57
SHA256

356418109b6500ee66960791ea8a5a9dd77ef1b3f4818d15d3684d2f796dab86
SHA512

e4a931d956be9995fb622faaeebd898e3db68de5063b2996b0e6f520d207c42b1e95b7655bd2d1278a3a9eaf8482f7527e5d83297adcb6287c592e05b64f694d
SSDEEP

24576:nNseVg7kAfPSoaLLt/9UrcoC+X3ZR+zU3MxN3/zzeBV2zzx:nNLVg9fq/JOch+X33+zU3MT/zze+zF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

356418109b6500ee66960791ea8a5a9dd77ef1b3f4818d15d3684d2f796dab86
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ