3384072de03efc6f687c9c220897b4af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3384072de03efc6f687c9c220897b4af
Size

28KB
MD5

3384072de03efc6f687c9c220897b4af
SHA1

31a77150ecdffa7b5608517e63a182d8b7c243ad
SHA256

5bc3cb51a6abe4d28778895a9975aa6a4649b0bb639047021b17a7a96b6df1e6
SHA512

a549d210bd3d56bc81e0ae66b00291d968a5914e81e66452d318ff72b8d2be7c286d59e8c88a2d361d5d574537b11dc40d77df2ce01c09244689534a8abdfb3e
SSDEEP

192:SMrOS4e4cLyg9IcZQpvHFD8DxCTU7DkGrBV5n:SZWtyg97ypvpgC4gUBV5n

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3384072de03efc6f687c9c220897b4af

Files

3384072de03efc6f687c9c220897b4af
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE