3e9f9ce5fc4c89f9818add62bdbc1ca2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e9f9ce5fc4c89f9818add62bdbc1ca2
Size

312KB
MD5

3e9f9ce5fc4c89f9818add62bdbc1ca2
SHA1

2650b02d48edf083eeae4ac042635d6a2d975566
SHA256

39f9a3c30acc63fc4b5185c892d6a1cd23a63dbad5014ef448adb27ce0fea16f
SHA512

ea77fd46adba259ecb63c27072d9e1a3943ea41c68913820b2b2f2df5c76065a09cbc0ecf2129284553cc4d86e605a6b77960ee93bd607fc0db41212ce56e805
SSDEEP

6144:lvIgSMLwgkoK0zat8GzwzkIXfYnPY7gb1oK0zat8GzwMN6NL:lQgS0wCK0qjIQnAsbaK0qDa

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3e9f9ce5fc4c89f9818add62bdbc1ca2
unpack001/out.upx

Files

3e9f9ce5fc4c89f9818add62bdbc1ca2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 17.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe .js windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 17.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE