e229df5c53047345b6456acaaa3f9a58f0b6632e8b104ac8ec172918bb3de70a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e229df5c53047345b6456acaaa3f9a58f0b6632e8b104ac8ec172918bb3de70a
Size

97KB
MD5

b6cbe4698c7e3fe6b7de5152189f5580
SHA1

857a11c30605b6cf61284def48f66d08e768b71b
SHA256

e229df5c53047345b6456acaaa3f9a58f0b6632e8b104ac8ec172918bb3de70a
SHA512

692f4a04ef275e5ce13a1fd7ca0af9bea8fa6456cbbda689aa5938cc1d43562461b37790190b2cca3b14df2ce56f30d79cd26615e7a002ca9febf6a79a6e1e49
SSDEEP

1536:3mM4TZCr8bmc7vPgtAgB8+jOlqnrVj/lEn9igyQJR16H2nUS6/fR4DT7Ig7cAlR:WM4ory7XsxjOlqnxxEnlJO2B6H+R9R

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e229df5c53047345b6456acaaa3f9a58f0b6632e8b104ac8ec172918bb3de70a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE