e8356655f5f1541d8f50449e6805c48dfd410f687bc0b920fb99c71e21fb2a4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8356655f5f1541d8f50449e6805c48dfd410f687bc0b920fb99c71e21fb2a4c
Size

240KB
MD5

637bd4c9553e500965c5dc63649b83b9
SHA1

cb74ee2ae2b7806c27b62478e9925f1a552a6751
SHA256

e8356655f5f1541d8f50449e6805c48dfd410f687bc0b920fb99c71e21fb2a4c
SHA512

58348ce89865d426df4a20ab2065d0fd2a447692a00f5f6634d954d9d245113c085045528fcd11d876cfee10396daf45be3d7374c5d0e965440564bafa1e6f1b
SSDEEP

6144:z5DlK7BXzHgjDRT4wVuK11sFEwBpkLSm+luSk6XqLb+KV/YF+R:z5DUSjD/uK11g9kF/6XqLb+KdYU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e8356655f5f1541d8f50449e6805c48dfd410f687bc0b920fb99c71e21fb2a4c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ