e36ccf84937057d3d101adbb3b290b2991c44e5083088b33f1eb95d05c83c09e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e36ccf84937057d3d101adbb3b290b2991c44e5083088b33f1eb95d05c83c09e
Size

112KB
MD5

65c342b900487353d8eefdd142fd8ec4
SHA1

3468de82a7dab58f67046d178d61384e5cc8b1c8
SHA256

e36ccf84937057d3d101adbb3b290b2991c44e5083088b33f1eb95d05c83c09e
SHA512

1644745a4b16d1c0ad6e3b876d3a5f908bbda1bd6bfe1967f03bfd33b554143cc466aa6812d3f51f4b7ce4f60665dbe1da733df282e74ee9d28fe49bfe22b7fd
SSDEEP

3072:K1LpOf4iLvm2+pFrj07VTHeiadgicD8yB2/yt+TgHdJDHH:K1ryvmjpNj0Dad2Ik2/yugHdlH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e36ccf84937057d3d101adbb3b290b2991c44e5083088b33f1eb95d05c83c09e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ