e6637b9e41ba6c7e332ed785f2e74e6021f462141eea7ce60a12f627bde6f33e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6637b9e41ba6c7e332ed785f2e74e6021f462141eea7ce60a12f627bde6f33e
Size

357KB
MD5

b4b0d7d3275c70d4f8c06fd748fb6db4
SHA1

96a4dd7e6c123481e42dc3af3642d747186d978a
SHA256

e6637b9e41ba6c7e332ed785f2e74e6021f462141eea7ce60a12f627bde6f33e
SHA512

d5b1761c4e5dd1764adf45f572ec38c866ae51629e3463d6762c82155903e1c8b8fd414a1e93edaad4ea7bf9b60c2f9a0ce05f879ff0a4a87a80741287bb831d
SSDEEP

3072:Y37TbRreKAAfqD1krBHoE3VQuiMgHYjQPz6mYCZz2xFV7t1HhY1JVDXa:Y37Zr4RPEZYHz3YPFV7/y1JVDK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e6637b9e41ba6c7e332ed785f2e74e6021f462141eea7ce60a12f627bde6f33e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE