dc35ed152266f5a7849bb9bd7b658a4dbe2c4086fe3dacbd542af7df71eb7024 | Triage

Sharing

General

Target

dc35ed152266f5a7849bb9bd7b658a4dbe2c4086fe3dacbd542af7df71eb7024
Size

453KB
MD5

3590340c3b9ef22956849b02e9187bc5
SHA1

2db8101b1998ce09f39ce06dbccc3f6a252e8b5f
SHA256

dc35ed152266f5a7849bb9bd7b658a4dbe2c4086fe3dacbd542af7df71eb7024
SHA512

c89b9c540742b6d63665a87e128dd86d757201d8df09407bd39dc68fd6cb8254cda815ba0d3ceceee8e99d603808ebab94029e87a035d6ca4341d86ccb980ea0
SSDEEP

3072:T5uDoGpvlidDPvr3SlFQoX0FKZaqt3Ba5S+GsR0XLTZ28aVXUNAtk:T5uzIdLgBEFKZnto5S+GYEPZ28aiNj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

dc35ed152266f5a7849bb9bd7b658a4dbe2c4086fe3dacbd542af7df71eb7024
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 776KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 358KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 500KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ