Rating: 3.0
Flag hidden in packed executable, gets overwritten by UPX during decompression.
Locate the original flag, replace the troll flag with the real flag and let UPX do it's thing, extract from memory.
I don't remember