ae2bee8318686bcf4af0fd63a8feb04492ed7a40541499bc5dbffc47ad5e9d1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae2bee8318686bcf4af0fd63a8feb04492ed7a40541499bc5dbffc47ad5e9d1f
Size

611KB
MD5

0e89941760f792093f731a35f041b9e0
SHA1

8d7fdef046c689898f1ccf0b34f0fd8e805f3e0e
SHA256

ae2bee8318686bcf4af0fd63a8feb04492ed7a40541499bc5dbffc47ad5e9d1f
SHA512

e075ede1fad78f01a387285d36264713da38646dc3c353cb9e69280860d59bfa4139d78e489224a14e143fc059f9ce1dbbbcab1d2a4c32e0acab4e5689d305e2
SSDEEP

12288:Sb05KoNLk1Qyx7Dxk5JGMfMrUuBoDgLpTrvZqlvblSBV:Sbx91QQ71k5J9sUuoDCdrvZqZblSr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ae2bee8318686bcf4af0fd63a8feb04492ed7a40541499bc5dbffc47ad5e9d1f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 888KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 608KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ