3f704c501d348e6ffb539abc5e248aba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f704c501d348e6ffb539abc5e248aba
Size

54KB
MD5

3f704c501d348e6ffb539abc5e248aba
SHA1

ac9688e2bde1b1ffddcce753c512260eed0dd010
SHA256

06894cb95c4e2d7bdf335fb4929d8d9e5c7f7ee6de5c646a5292d5f43360e942
SHA512

10c721405f62feae81fa6e077bd5bc4f53f891a556a8b9851fd06dc2af5726eea6aa5bd79fbb7fa0cbb82b3367ec8d7aa9f9f8cd074afe3a5b1959c443e31d99
SSDEEP

1536:VOGNjDbLSq7UY0XaUyXxTf62oY5KscYnW7/OPOeF:VVRezY0XQXxTZoaK0q/8F

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3f704c501d348e6ffb539abc5e248aba
unpack001/out.upx

Files

3f704c501d348e6ffb539abc5e248aba
.exe windows:8 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:8 windows

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

Sections

Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 19KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ