3bbf097746fe7ccc3c2503f7705ee97766a48d76a7bb254d766cd23de84d8d9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bbf097746fe7ccc3c2503f7705ee97766a48d76a7bb254d766cd23de84d8d9b
Size

5.2MB
MD5

979798afe139a433e75f8357df15b068
SHA1

3aede4b9f9ea19fe6defa2859448c12606cb0450
SHA256

3bbf097746fe7ccc3c2503f7705ee97766a48d76a7bb254d766cd23de84d8d9b
SHA512

185f0ab840eab3826093c40e425a908713c5c77cc13b2358ef9d808f40f4b0bf76c49893485ea60567a1a3a438cf296af84be1a2312110c134a6856bbf58cb62
SSDEEP

98304:YvDiP4sAA0POUXfam0bU3WvpHhPNlH3tUvkwxlk:Y7iP4vQSNqVplHCB

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bbf097746fe7ccc3c2503f7705ee97766a48d76a7bb254d766cd23de84d8d9b

Files

3bbf097746fe7ccc3c2503f7705ee97766a48d76a7bb254d766cd23de84d8d9b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE