1e1b584f956cf2f5c45fae6d859a15e874b75ff0bb37ed8c5185af09287e5980 | Triage

Sharing

General

Target

1e1b584f956cf2f5c45fae6d859a15e874b75ff0bb37ed8c5185af09287e5980
Size

1.9MB
MD5

982069735abf3a43795391dbff28a48e
SHA1

bbc9467c17b5dabfd96e01384ec6b27ef04cbb07
SHA256

1e1b584f956cf2f5c45fae6d859a15e874b75ff0bb37ed8c5185af09287e5980
SHA512

c4aada82ec6ecc5b59029709fbda8b205e1243737eeab38683e74252bae345c30b23acdb14fa622c500c113c0483075078295b3b28298965a76281d42e0ac5d8
SSDEEP

49152:d9AtclN1BETpmlo+P/ytSHDbfyr4h++f7g0rqRtq9aI+/wO:d9At6Na8ljHDbKchd7guqjIewO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1e1b584f956cf2f5c45fae6d859a15e874b75ff0bb37ed8c5185af09287e5980
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ