e4e53fc776b2a4e339507315e129c91463de30374d5d6edb4781b384f3138bee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4e53fc776b2a4e339507315e129c91463de30374d5d6edb4781b384f3138bee
Size

102KB
MD5

694a36a28f493bca46a6c3057f5a40f6
SHA1

c2f8f5789f52a87ca6d630de0c445457ddbf60ac
SHA256

e4e53fc776b2a4e339507315e129c91463de30374d5d6edb4781b384f3138bee
SHA512

c163fc6c21aabfb8c870f0745f88edfa402844a02ba2a3e4f75a654e3f3665ff4f1e8e098eee3412ec1144bc773ecbc5b0db68f6e798054a096b57412986ae87
SSDEEP

1536:/ucBnunKmxKwy5st8H6jJJMxg6gc56mT4ZaFuWP5RQkLLaXVsr9Q265Pc77Vll7+:mn/krajJJMRvswOmnQ2APO7VlV2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e4e53fc776b2a4e339507315e129c91463de30374d5d6edb4781b384f3138bee
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ