e5774893f2dec7ce2915dc0900151e9721beec5e7e244086d0fdccfd71ef6b91 | Triage

Sharing

General

Target

e5774893f2dec7ce2915dc0900151e9721beec5e7e244086d0fdccfd71ef6b91
Size

22KB
MD5

c9a6e26851503310f4e9810b9bcc751f
SHA1

7134af3b3037548dc8fc3325e4b56f4b64ac76ea
SHA256

e5774893f2dec7ce2915dc0900151e9721beec5e7e244086d0fdccfd71ef6b91
SHA512

7bf171ac61828248a3b2b30f7bb806fc83ab57a839d787c3c9faecc5a7eee79be9c95914fc8be41952b74418fc8ed5815e6a55630fff16a7fcb22974fae89785
SSDEEP

384:Y6B4ojwtGBts9iXyuKFztSJgI0hcAkR0EGWDcDYY9aKQH/WWIB:54lGBts9woFztJphwi0gsKQH/A

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx
static1/unpack001/out.upx	upx

Files

e5774893f2dec7ce2915dc0900151e9721beec5e7e244086d0fdccfd71ef6b91
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.UPX0
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UPX1
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ