3c090759adcc30a43713288c1402aed192de0fca5e81ba0eaa9761f4650b3a53

General

Target

3c090759adcc30a43713288c1402aed192de0fca5e81ba0eaa9761f4650b3a53
Size

2.9MB
MD5

4f46caafce5f453d08314cb0b9b49cad
SHA1

d54c6277d7357e083123800406af2f076259ba2e
SHA256

3c090759adcc30a43713288c1402aed192de0fca5e81ba0eaa9761f4650b3a53
SHA512

d6477486ce04ce2fea697a087998acfa1fd673db9f6c0449bccdd426575bcb423698a633af8d58413041f576792e4a18a0ae39ccd195025b5c70b135277fc1c8
SSDEEP

49152:8LA5zfFMoFJ1M7HbLqRQ6QOjMVb37zGheWRn/Xj+xNtKx1dACrVzLlPa0m7olOI4:8LAhFnUHvqzQOgVbLz0J/T+xNMxTJ1lg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

3c090759adcc30a43713288c1402aed192de0fca5e81ba0eaa9761f4650b3a53
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 972KB - Virtual size: 971KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jyfcgvhm
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

jyfcgvhm
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jyfcgvhm
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.6MB

UPX1 Size: 2.9MB - Virtual size: 2.9MB

.rsrc Size: 31KB - Virtual size: 32KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 972KB - Virtual size: 971KB

.rdata Size: 193KB - Virtual size: 192KB

.data Size: 60KB - Virtual size: 67KB

.pdata Size: 14KB - Virtual size: 13KB

_RDATA Size: 512B - Virtual size: 244B

jyfcgvhm Size: 1.8MB - Virtual size: 1.8MB

jyfcgvhm Size: 3KB - Virtual size: 2KB

jyfcgvhm Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 31KB - Virtual size: 31KB

UPX0
Size: - Virtual size: 1.6MB

UPX1
Size: 2.9MB - Virtual size: 2.9MB

.rsrc
Size: 31KB - Virtual size: 32KB

.text
Size: 972KB - Virtual size: 971KB

.rdata
Size: 193KB - Virtual size: 192KB

.data
Size: 60KB - Virtual size: 67KB

.pdata
Size: 14KB - Virtual size: 13KB

_RDATA
Size: 512B - Virtual size: 244B

jyfcgvhm
Size: 1.8MB - Virtual size: 1.8MB

jyfcgvhm
Size: 3KB - Virtual size: 2KB

jyfcgvhm
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 31KB - Virtual size: 31KB