e4dc33fe516693636c3d6219572569a55024a41341afec38edcf78883daa063a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4dc33fe516693636c3d6219572569a55024a41341afec38edcf78883daa063a
Size

284KB
MD5

1143a57789bdbea577350ae8f44822f0
SHA1

f8fbd1919a919c77da42c6cf6cb1a2ef84c10b13
SHA256

e4dc33fe516693636c3d6219572569a55024a41341afec38edcf78883daa063a
SHA512

ff3ad298557a22b318e676ec05994dc0720fde15cf32857fc6aec41f737382d69401caf874fd3da1c6b00f2e3cd0c024b7cbed0b0642c94ff2824d657abb9477
SSDEEP

3072:Mv/C0FEXsZxcfwUWxPRJI5hNql3hIoDz0MQC8q2HuBhc:jwBZVUWCnNI3OoP0MDg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e4dc33fe516693636c3d6219572569a55024a41341afec38edcf78883daa063a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE