e5ee1e8ceb8e3ddd758aadde02db085b59ac98586ef059c8808a81d5c1e293c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5ee1e8ceb8e3ddd758aadde02db085b59ac98586ef059c8808a81d5c1e293c1
Size

302KB
MD5

53ff83dc8c623ef61998e615ece7e06f
SHA1

b2f234f04439e38e42eec22321b717c9ca5ead1a
SHA256

e5ee1e8ceb8e3ddd758aadde02db085b59ac98586ef059c8808a81d5c1e293c1
SHA512

e9e862ffd9fe390e8d3efa9d71290841a95feb9ea878166f51d07ba7f3e3ec0d5106ed8fd158f8037dd2b9c2794cded2940580b98f8446c8dd0ccb53e77d70c8
SSDEEP

6144:lnNhR0RO+BeaenG8IAVCNhtyLry8SWY84f+OmvWstcXNyqDkB6hk:Vhcen/INbyLry8SE4f/otQYqs+k

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e5ee1e8ceb8e3ddd758aadde02db085b59ac98586ef059c8808a81d5c1e293c1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 752KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1004KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ