e0c0f07e54b54b06b93fc49047e0b071406f72a3a87b57f5f63eb418e7b0f0ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0c0f07e54b54b06b93fc49047e0b071406f72a3a87b57f5f63eb418e7b0f0ef
Size

22KB
MD5

08014beee29fa9c91082d27059eb8614
SHA1

e5c25ef3448343cd9f237357f392a348d682d93e
SHA256

e0c0f07e54b54b06b93fc49047e0b071406f72a3a87b57f5f63eb418e7b0f0ef
SHA512

16fb8e23dcd9c2c14b2ae9dc4d3e898447658952d36b2215f4b152c969c1db6dc65bf4979011826f6fbccca42dd09d77263798f15e5f31cdf5fa24e0d4beb519
SSDEEP

384:N0MiIa9wGX5VdAnBVHYNsS3RT6paliduUi5yv/mqREKDwt:NW9wGJVd+ByEpfiUv7Rs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e0c0f07e54b54b06b93fc49047e0b071406f72a3a87b57f5f63eb418e7b0f0ef
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ