e92c047928bf9ab5e8454d5aa395170e77c63be88a1e9b51551f5283067d28e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e92c047928bf9ab5e8454d5aa395170e77c63be88a1e9b51551f5283067d28e0
Size

5.6MB
MD5

08204fff10ed5c8f7ececc1a61a54a68
SHA1

31174c8275e50f9a32228886bbc65b01a83cd118
SHA256

e92c047928bf9ab5e8454d5aa395170e77c63be88a1e9b51551f5283067d28e0
SHA512

1721cec2229d9a430ae961a54d2f12d0d29872a38bbd4feaf5acebad00e0c9e4bc0793343445733d519da2c250e959bea73a727c6e3a83af4f4cc87d22b4e23a
SSDEEP

98304:CD/PKajTRS/sM3fImjUdzNwQMZWNlveCiK9Sx9MfHElna1C7tu:CK3fUlzMgNbiKk7MElncsu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e92c047928bf9ab5e8454d5aa395170e77c63be88a1e9b51551f5283067d28e0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm

Sections

UPX0
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE