a0e42eeae302e10f6c85ac5d1058a1b31dce7ba1fa97e945c1d7ef80f4593fee | Triage

Sharing

General

Target

a0e42eeae302e10f6c85ac5d1058a1b31dce7ba1fa97e945c1d7ef80f4593fee
Size

2.1MB
MD5

6d3f73177b13b93d56f85c779037fba1
SHA1

0ee92e0c8c23256ad3ea2af7ca4eab687242239a
SHA256

a0e42eeae302e10f6c85ac5d1058a1b31dce7ba1fa97e945c1d7ef80f4593fee
SHA512

a8335960bf591a60ef0be0c4e166220a7984280643fd893b6feff820dc0c6429bfb603ed9af4966c31b108f4b48239ab106ac38e2656db67bf9bcf9f002c8c45
SSDEEP

49152:Oc1ImWmCEwAZRMams2EEb8fCS4ZCB5G3pWlgq2KcWig3:Oc11SEwcRMamscD/S5JB2Kc63

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a0e42eeae302e10f6c85ac5d1058a1b31dce7ba1fa97e945c1d7ef80f4593fee
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ