e80ebfb8cf44a027f853583181244ad4bac0c77f1934d92620b14b4fd5e53ce1 | Triage

Sharing

General

Target

e80ebfb8cf44a027f853583181244ad4bac0c77f1934d92620b14b4fd5e53ce1
Size

79KB
MD5

a4459b1cadf9a673e5b5de0889cad647
SHA1

ad8dff9e6071217503825425d7afab14c459c69d
SHA256

e80ebfb8cf44a027f853583181244ad4bac0c77f1934d92620b14b4fd5e53ce1
SHA512

754f0b781c3f0a6062a2d66ec73c7c1ee505d57f1e195d7a0799658f9ef69d1ddb64156c8f34a9f54ea8ca1f3b8ee202708bb31da876904291e8574190adf398
SSDEEP

1536:X68F1XnstmbwbYA+6Q0XfXVsEg0WWU1sb1tic7cJ0XRR6tj2qkSZZZ3gb0ibzMOB:XR3stcAXQ0XNK0WWU1sJtg0Xr6tjYUCr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e80ebfb8cf44a027f853583181244ad4bac0c77f1934d92620b14b4fd5e53ce1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

TEXT
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ