e6d25edec7b5b5a2d9cbb20680b4da346163e770ecb3319af07c686865e5cbf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6d25edec7b5b5a2d9cbb20680b4da346163e770ecb3319af07c686865e5cbf4
Size

14KB
MD5

b3706c90ebc186d09284dffb443e41cb
SHA1

31b07ceecc77110fbc1d2e34bd6734fb17f410c3
SHA256

e6d25edec7b5b5a2d9cbb20680b4da346163e770ecb3319af07c686865e5cbf4
SHA512

a0d534e4e319b52dd2d60f313cf2dda16c088b807aa45da9e69b6dc7ae92ec3584b2667fdd507eb15f488b52b8ba883e090e1d5e4e08afca9b7e251d021e1a73
SSDEEP

384:eUdkH9FOjujpBueWUKy/620+VBxdpt1eWL8r:eUKdFOjQpBPWbfgDoWA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e6d25edec7b5b5a2d9cbb20680b4da346163e770ecb3319af07c686865e5cbf4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 5.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 5.0MB

IMAGE_SCN_MEM_READ