3e8a8a7bd688119b62fba2003f77fe157f2b9c3317fc1997d630791481015908 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e8a8a7bd688119b62fba2003f77fe157f2b9c3317fc1997d630791481015908
Size

63KB
MD5

bfb6156384f70b55280163611ee08dd9
SHA1

8034a6246e992eeffa97d0b1e02711fbbff347e8
SHA256

3e8a8a7bd688119b62fba2003f77fe157f2b9c3317fc1997d630791481015908
SHA512

b5d6e036b624dbbf5c7de5e21f957a5a93aad9fc9515a49f32f6e0114551c35490c76a15305f87a29dd413ca6de48b2186801d09a56c10a40aa964363eb4eca8
SSDEEP

768:1FIQSdbajxjs/I1kmVpx9jECsVJi6BQAm9P8uYnKrUeAZVd7Duk5c+ok1:1OWjsuVxD6aser1Az1C+oG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3e8a8a7bd688119b62fba2003f77fe157f2b9c3317fc1997d630791481015908
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 420KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE