c3f1f36b0b1d2be6b6f6e4cbf0c801af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3f1f36b0b1d2be6b6f6e4cbf0c801af
Size

134KB
MD5

c3f1f36b0b1d2be6b6f6e4cbf0c801af
SHA1

f24ee4d0772f29a790ce1cd154f29bbed0fc02df
SHA256

b2c8af6ceabac94b2d80c50369bd7bf4ca217baa8081c471e7ed203e76feb456
SHA512

f64269df711b1b18a332000e253a1d4c639b5e93e57fa741ef8a452daf32116b1b9d4c11cc69934ca3acb3f03c6829596cfba8ffc04040083db463cac3617ea6
SSDEEP

3072:o4GYYVoRT5RVilNF6Bd4Ue2pCs2KfZaONPfb1WF71Dx:XG9Vo15UFii1Js2KsOiFhD

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
c3f1f36b0b1d2be6b6f6e4cbf0c801af
unpack001/out.upx

Files

c3f1f36b0b1d2be6b6f6e4cbf0c801af
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ