97e004ef8723247d1f71b4275d14ba28a94527a1dc81231e0026e916be92736c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97e004ef8723247d1f71b4275d14ba28a94527a1dc81231e0026e916be92736c
Size

482KB
MD5

e40c120b9f32041fa11563eed6725893
SHA1

ddce06d05ce9c687ae6fa5568dc8e21f24e6f5f3
SHA256

97e004ef8723247d1f71b4275d14ba28a94527a1dc81231e0026e916be92736c
SHA512

fdccfc04404d3c31af0b34a6643f6649e2acc8092d4896791e6f8f5ec9a091087a8341dc4a74c9b16f8218a23d9be0ba52455344f059f7dc8705c426d9179c52
SSDEEP

6144:KxBWeMRygxDLbHxlSBxzJb1REBB6q1gBFJV6AvRqsf6YU+FM+3Yn/fCXjQGDq+tI:63MQIDKJPTq+Xxvo0U+d3s/fCX0aI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

97e004ef8723247d1f71b4275d14ba28a94527a1dc81231e0026e916be92736c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 153KB - Virtual size: 328KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE