e62a6e2bb011bc7a93943a1b51c297b27cd84eab382f7505f1ef1eb901aa2c1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e62a6e2bb011bc7a93943a1b51c297b27cd84eab382f7505f1ef1eb901aa2c1d
Size

39KB
MD5

55307442dbcc19914d23feb473303f96
SHA1

3fe4c4e0942cb1c552eaa9a6d87120cf3d548969
SHA256

e62a6e2bb011bc7a93943a1b51c297b27cd84eab382f7505f1ef1eb901aa2c1d
SHA512

14c2eda3d7a56df02a13a0a216267da0ea6b74818fd9a5af838edcfeb34c3dca08c261954e208202c119f938538a6983794f8d58c8cc477552340f29d4c9ad08
SSDEEP

768:SAqy9hZwzs7GXRK1haReD/2yWV5L9O3rbImkubt5slGKfNPy:jSzs7ARK1hak7WVVwAtuaq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e62a6e2bb011bc7a93943a1b51c297b27cd84eab382f7505f1ef1eb901aa2c1d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ