2e81e6997655132c5865bac9bc42d72001f8ff7cc15f3b481101c807673c0b73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e81e6997655132c5865bac9bc42d72001f8ff7cc15f3b481101c807673c0b73
Size

45KB
MD5

10b5d41132a1938edb48ddb1c264b300
SHA1

b2fcfddd393fb8c15d717515a969ddda19ac5b9d
SHA256

2e81e6997655132c5865bac9bc42d72001f8ff7cc15f3b481101c807673c0b73
SHA512

91605b599ffd9e69242cf3f259688d9fad0367ede205247cb53e5e1c97be817485a6eec476748046f0d3f2eabbd5cdf4813cea237e14147479e47c65ed89a35f
SSDEEP

768:fc/iHTqr4jlXCffDthJB8zYwF3CHoDwd5r4auoN47yX+fMM:5Wr4jlX4bJOzxFSHnr3uo+7TMM

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2e81e6997655132c5865bac9bc42d72001f8ff7cc15f3b481101c807673c0b73
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ProfileTab

Sections

.text
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ