e5273c45a39752e15db36c86ab256fc7bfce9298e533332afcd0c48647931072 | Triage

Sharing

General

Target

e5273c45a39752e15db36c86ab256fc7bfce9298e533332afcd0c48647931072
Size

425KB
MD5

edaf88a4624d042afb334a9d4f3286f4
SHA1

a7a88d4b22ec8eb92cd9dbc72f24c3595b71268a
SHA256

e5273c45a39752e15db36c86ab256fc7bfce9298e533332afcd0c48647931072
SHA512

b831c4c46d3e862b830267208e44ccb8a8d504257767b53051f0b8c68734787d14abcb40a9ce9340487a7ca0440c457ecfe1c7035a776b79747f9a21e802be85
SSDEEP

12288:xJzSqCjDEICtZNZvtFhs7pl8zov+250aXd7GRi:xJOlEJtF/hs7pUsk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e5273c45a39752e15db36c86ab256fc7bfce9298e533332afcd0c48647931072
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 420KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 836KB - Virtual size: 836KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ