8e7d2ca72f53cf962a4f69f313f787295487ca447238396cd125f92c2802355e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e7d2ca72f53cf962a4f69f313f787295487ca447238396cd125f92c2802355e
Size

372KB
MD5

c8c4f46a3d09b38e9b20408b0bd1abc3
SHA1

44aa6eca2a51150f7b3d306c9282a071ea127ecf
SHA256

8e7d2ca72f53cf962a4f69f313f787295487ca447238396cd125f92c2802355e
SHA512

35cdaee601545688611f0f07c451589963ccfaacbeb511c5af071d72cc2364281b2825f461e12607cc38f93c313d59ff765d84c667b86aafd0cec22833abea9a
SSDEEP

6144:nTnjnvrM3mjHGh5Doh9Z5cAea4Jv81E6VSPnnomcqcOl/:nHn438Hwerea2vEEnvrFcg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8e7d2ca72f53cf962a4f69f313f787295487ca447238396cd125f92c2802355e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 372KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TUPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE