e9e1158164fbd34b56c15dd489813847f795969d45ed235f33206b902a4a5498 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9e1158164fbd34b56c15dd489813847f795969d45ed235f33206b902a4a5498
Size

70KB
MD5

0f95edb74cfd43753cb1843e60bcfa20
SHA1

4b55f8d317b08153d0741aad3d700ade3563ef2b
SHA256

e9e1158164fbd34b56c15dd489813847f795969d45ed235f33206b902a4a5498
SHA512

161adf93e916d07b3ecc2c301dda6d02580bd612df4b230c3a883ac88bdec6fa09a853fdd7b52f5e5520c5a99c220252a5d4e77ffbd20f8ed11d23e8d2d0af16
SSDEEP

1536:5Zl3N/3022n/Je0vPZtv49rovpu74YfKM:jld/30jn/JnRq9chu74/M

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e9e1158164fbd34b56c15dd489813847f795969d45ed235f33206b902a4a5498
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE