e30dad8290952514d588940fd96ad1b6046092a45c1bc68092c652fc230ea8d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e30dad8290952514d588940fd96ad1b6046092a45c1bc68092c652fc230ea8d8
Size

33KB
MD5

67f2c7e830f6d60e89d3d78580ee39ea
SHA1

e49be774fcb565b8e2146059215824895d4c68c2
SHA256

e30dad8290952514d588940fd96ad1b6046092a45c1bc68092c652fc230ea8d8
SHA512

e688ca758452c06beee239e0211046fa00ad348bcb1f71fb8a7f7d9b8fea91d480b268cc071ea8e3864846ac271a0200edd66fe22caf412cf5312922b353a4cc
SSDEEP

768:afDEhj6mKrpt/hpGD9U2XXSmj6mIpJ+e:eDEhjpUpZhlpmjpIn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e30dad8290952514d588940fd96ad1b6046092a45c1bc68092c652fc230ea8d8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dswlab
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE