1e497c4260e2ecf087c17ab463e457f6655423f35ae0b7d84c8356915061026e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e497c4260e2ecf087c17ab463e457f6655423f35ae0b7d84c8356915061026e
Size

194KB
MD5

ec446d719d8ca03efe35db5b0d4f34e8
SHA1

693059aa11ab972d0807d99fe14e6d94a7eb70b1
SHA256

1e497c4260e2ecf087c17ab463e457f6655423f35ae0b7d84c8356915061026e
SHA512

b10f51a3fefe74bee7391c4d9f0a2e7cf5562f47137eb13ea5edbd728282b3aa935798ec2824ad2deb1408b281237285fc15ea5b7a06c24945da63b64a64ed30
SSDEEP

6144:K6jaDGtkgzmp6EMTUMfGPhpuwLmfHT75hcU:haaRQ6EuURu5HTjh

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1e497c4260e2ecf087c17ab463e457f6655423f35ae0b7d84c8356915061026e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE