9e2e86a83786e47a8f69ead358a4f31035b1710703dbe8c9c539e848e4420173 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e2e86a83786e47a8f69ead358a4f31035b1710703dbe8c9c539e848e4420173
Size

703KB
MD5

4c3605f38f2255d34e072dafe22cbe74
SHA1

84105bafb25c7782cd40f622c81c39ec9cffe3ad
SHA256

9e2e86a83786e47a8f69ead358a4f31035b1710703dbe8c9c539e848e4420173
SHA512

3ddcd6ada239a657d322ab5646d64b749eb72ead1772282235b5aca24c2aa60694e80fd86860d65c61ccd341dc4d1adca8e79bb138ee87e99e5ca69f70cf45ba
SSDEEP

12288:i3OUoLE11S7RIEcQ135FHTF/l7fEBghnS:8OUop7VJb52BkS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9e2e86a83786e47a8f69ead358a4f31035b1710703dbe8c9c539e848e4420173
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

UPX0
Size: 148KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE