3f50f4e61d074edfce3af3db3ca20df4aa5e892449ef0e92b40288628657c325 | Triage

Sharing

General

Target

3f50f4e61d074edfce3af3db3ca20df4aa5e892449ef0e92b40288628657c325
Size

46KB
MD5

8423906cb187caf2ee27fe51723a1905
SHA1

bdb8ddd88e22c67db3c0cae6b47e55663509df61
SHA256

3f50f4e61d074edfce3af3db3ca20df4aa5e892449ef0e92b40288628657c325
SHA512

9f00fae9c1ac3fd881bc4f3a9cf10fb0c1516657c0c9d9b447c537fa9e4506300b690158647ac096c4167fcbe3e38b6a3082a06c449b5c61418a44f5ac470609
SSDEEP

768:KXBlO689SxwjRlwk1fCBQrNug52l9RTu7+L2FRgVGekM7mDyUE4:Kwi8aQrNA9RTu7BUV7mDyE

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3f50f4e61d074edfce3af3db3ca20df4aa5e892449ef0e92b40288628657c325
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 368KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ