e534dc43bcc12d05c22842eab9332592a1cf66783406c9e2b0dee4d46689ac97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e534dc43bcc12d05c22842eab9332592a1cf66783406c9e2b0dee4d46689ac97
Size

446KB
MD5

6360d9ac9761413227e2bc42ebe64270
SHA1

fad6cdf1b3c2e4331b6d5162aa0b1a5ded396b7d
SHA256

e534dc43bcc12d05c22842eab9332592a1cf66783406c9e2b0dee4d46689ac97
SHA512

fd3035188730e3de26677defff1b283d30ef6aaf252bb8f987aa117522dfccfd9c5f8ca82612b648ec964aa46ebdfbfc29b6cda97dd0aeabbc4e6435288dfe19
SSDEEP

12288:q9ZH09mNb9dns284G5Sm9qI1ThjlmF7CZegN5:gZTpXsMG8mz+BeL5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e534dc43bcc12d05c22842eab9332592a1cf66783406c9e2b0dee4d46689ac97
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 439KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

beoA9kBf
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat_04
Size: 130KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ