3ee545bb1c30b96bff656d9b5ecb322e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ee545bb1c30b96bff656d9b5ecb322e
Size

29KB
MD5

3ee545bb1c30b96bff656d9b5ecb322e
SHA1

fc0bfd8d80575fdaf65dd62f5feb889af124bf40
SHA256

7bff98848e283c1e0fdcadd66ca10046b05802562a23e10b624eb0ac898fe8ed
SHA512

369264ab76c27470d18e476fa3c626f1a3b4b411e44f1de50295588e4eed4a3c93087e0d6e4ce65b6efb7f5a5c15beb72eae58cc5d5c195fd473033627ee1be7
SSDEEP

768:qhgz6Y0L09gDnLekPTGzLg/xb8yBGfg2v7TNqCn+mbA0TLvP:qhvY67LrGzLCxImGf8C+MAILvP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3ee545bb1c30b96bff656d9b5ecb322e
unpack001/out.upx

Files

3ee545bb1c30b96bff656d9b5ecb322e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE