3fa2c2c8aff47c144d8aeb07938d3105 | Triage

Sharing

General

Target

3fa2c2c8aff47c144d8aeb07938d3105
Size

142KB
MD5

3fa2c2c8aff47c144d8aeb07938d3105
SHA1

e15b482a94dc9f46c989b6401d90aa0745e80402
SHA256

e87caa3e0beface996729fdd2dc5ecc3bcd74f6f1095c4e684846fe1b53c5afa
SHA512

a0f1c3a11c4b875fec380492f0968f14d7f427a347259ec99cc46da8badb9d7128269432185ef8655bdebd5e1259002c20a1ea9d19d28d5ad4e4eecba3a423a4
SSDEEP

3072:LFsKdfOg3h7rMPrEE9W7exgVtn4W2PoULjuHfe1v0Q3LwiMQU:6KdfO+XMDpW7f4YWuHfep0eEdR

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3fa2c2c8aff47c144d8aeb07938d3105
unpack001/out.upx

Files

3fa2c2c8aff47c144d8aeb07938d3105
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ