5e62f76ee994ddb6434f20a78538504bec3156171c44cb0bc16c103a73a41a54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e62f76ee994ddb6434f20a78538504bec3156171c44cb0bc16c103a73a41a54
Size

2.5MB
MD5

f5539c1c8bd06f16183d0def27a80099
SHA1

e09fe11f9059eaf1f155e4635c1bdfa8fad1f8be
SHA256

5e62f76ee994ddb6434f20a78538504bec3156171c44cb0bc16c103a73a41a54
SHA512

da59c2c1b5aaaad1a6e52ebadb5bb6570f3c9de712cd58e67cf97d02a62e668cafdd0ca8501fa051d4c3a82186db4b186acd6634edbbf88477d9a85fe7b68b39
SSDEEP

49152:zRXhO/Kxz1wYoyFUcieSseHLYyRMgYTM0RWYZZ23qLF5cx2xL:zhbF1lieSseHLTRMgYA0sY723yF5cx2h

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5e62f76ee994ddb6434f20a78538504bec3156171c44cb0bc16c103a73a41a54
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ