e041dda5286d4bc0213cd8ef256765ee3778bd5ee2d2c961eb8394d4f06726b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e041dda5286d4bc0213cd8ef256765ee3778bd5ee2d2c961eb8394d4f06726b1
Size

207KB
MD5

22dcd84a89023e6d3b41cc16b6c18840
SHA1

b29fc31d054a07b3cfbf5a91d50fa94dd2d0aea3
SHA256

e041dda5286d4bc0213cd8ef256765ee3778bd5ee2d2c961eb8394d4f06726b1
SHA512

948e5872b4d07f092812d1d1caaabebfd450234b1593afeea9bbb43a42e2d46aaa85eefcd98167624120e6534a137773b6c02c43d693b947928cc21b8b6dbcb8
SSDEEP

3072:p1p2gBIU8WuvmK2BGXeV6m1iZpedxfVx+xNy2VNVc6IcY0C6FhzMYqq3uMnPXTCZ:p1c5mtBGXeV6WfVxGNV5YwD3uiW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e041dda5286d4bc0213cd8ef256765ee3778bd5ee2d2c961eb8394d4f06726b1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 198KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ