9e5af1cba7c3d52fc1bdfb3149b6ec65ea4e0afd1af9fa9019b0ddab74d88c9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e5af1cba7c3d52fc1bdfb3149b6ec65ea4e0afd1af9fa9019b0ddab74d88c9e
Size

868KB
MD5

4d85b42c496b0bb4d971937447632401
SHA1

8beeac92cc1be5139b8b7fd19c464bf341c5b86c
SHA256

9e5af1cba7c3d52fc1bdfb3149b6ec65ea4e0afd1af9fa9019b0ddab74d88c9e
SHA512

b71be5eef6494b5cf28cd195a31fdece9f51fc64e473f232efa414d3d1c0f03db4a45179d81222bd0d89ff1c526d6856570a0936e128980742fe45094054b06d
SSDEEP

6144:pYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO7BSSsQLH5Ad:pSNC80I+cR3R03VseuOtSSsPd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9e5af1cba7c3d52fc1bdfb3149b6ec65ea4e0afd1af9fa9019b0ddab74d88c9e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rol
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE