ae36baeba329760a0e7e3e4fbae6e868d7e250810fdffe105b596565cf749863 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae36baeba329760a0e7e3e4fbae6e868d7e250810fdffe105b596565cf749863
Size

21KB
MD5

62c37334f1ed33d3120033a654eec03a
SHA1

dc86c7a0078ea617881ddf64656cfc1dd2685bff
SHA256

ae36baeba329760a0e7e3e4fbae6e868d7e250810fdffe105b596565cf749863
SHA512

f4be090763f3b8189457bd1ad8ca1a62b21f4a2627692f663f1321361edb90ab009ea2ef06c3d8f814bc96feee72802ac3aa92f52c47605a814b01b026b03b5a
SSDEEP

384:Cw+ECKHPxRz3IKoo8Vaw0Gqn8WUdv2V2YXWokXfZXBittx3ey/AqezzRIVar:Cw+ECYxqKw0G6Av2jQAx0FzMa

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ae36baeba329760a0e7e3e4fbae6e868d7e250810fdffe105b596565cf749863
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE