d24caa98fc1fa67e24fb21e6d79a3c27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d24caa98fc1fa67e24fb21e6d79a3c27
Size

40KB
MD5

d24caa98fc1fa67e24fb21e6d79a3c27
SHA1

784c3fb7ff047d2cfccde118e8e2d1b15d230f24
SHA256

82215aba613ca504b928853c84b8273ff3e10094e4f6f7ac05600e2850d07e27
SHA512

727f56e0d02a27f72b6d05703fb1b1bf19cad1deee1f8d6ce9ee283e4a2057697d2706c78d609686bd9754a5d6b363a2012a52c072c40d686e1bd8e9411cf732
SSDEEP

768:Mge0SaIUX7f8Q/4FO+K+hkGTZGltTbvT3ValSMAylXZ6DRP14hAbmcf:MLkL8IaXYGTZGltTbvT3GAyX69PMk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack002/[email protected]	upx

Files

d24caa98fc1fa67e24fb21e6d79a3c27
.eml
.zip
.zip
[email protected]
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
email-plain-1.txt