e86fa6db95410963be5f58fbbb2f91b87c1f0596a979c33c17398498bd01c70c | Triage

Sharing

General

Target

e86fa6db95410963be5f58fbbb2f91b87c1f0596a979c33c17398498bd01c70c
Size

199KB
MD5

6c8b5f29352a88a0e3ee74837b2c8471
SHA1

b37cb54fdedbc42a7c3fa08ca20a1186aaf12879
SHA256

e86fa6db95410963be5f58fbbb2f91b87c1f0596a979c33c17398498bd01c70c
SHA512

3033aa134aa40611ee6d8afa6937234bb0b5b9d5b0b0c498d77733a0b87eac7976c8576d14783fe1755173515127c1eb9fe1fced102a3dff777d1bf603becfa7
SSDEEP

3072:K/Vr0mbO89BTB5UaTIw+Zc71CY1sFUnfR/QnQxA3xw:spSeTGZ3Y1sFUnfRxy3xw

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e86fa6db95410963be5f58fbbb2f91b87c1f0596a979c33c17398498bd01c70c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 191KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ