0e40cc355fc3469a5a699163ddb2d3ece4e5bee74f359d229d0ef77e442f4777 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e40cc355fc3469a5a699163ddb2d3ece4e5bee74f359d229d0ef77e442f4777
Size

1.7MB
MD5

3b2fdefaa601f2a21c685acdaccc974e
SHA1

54e8eac634743bb253ec7abb4e0605f67e2987eb
SHA256

0e40cc355fc3469a5a699163ddb2d3ece4e5bee74f359d229d0ef77e442f4777
SHA512

f28252813b58f136ada4d71dadde3e2255a4b2a23c62d8bf02faf91607d55169c3e45960c8c953412e8d5a63688d6e82f625900341e69d599c54993c67b6cccb
SSDEEP

49152:dCCmuzo/vjWQldDQrtW0bENr1QTQ5fCTb4ZClhiV0wOZFqLyE0whdt2v:dCnuz8W+dDQrtWQENr2TGfCTb4ZCbu0p

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0e40cc355fc3469a5a699163ddb2d3ece4e5bee74f359d229d0ef77e442f4777
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 516KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 528KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ