e1016571e7b0910f6d6f703e792f113ea2e74927edbd22078cc7461b858c2d83 | Triage

Sharing

General

Target

e1016571e7b0910f6d6f703e792f113ea2e74927edbd22078cc7461b858c2d83
Size

233KB
MD5

4edb01679f2b78a0b828e185e90b9fad
SHA1

13377a70756fd3a696fa79622315505eebb74cde
SHA256

e1016571e7b0910f6d6f703e792f113ea2e74927edbd22078cc7461b858c2d83
SHA512

abcba4a5448db01ce56249fa8b5a8e04a41203c190bf6097d8d6cddbb4cd4edfa792ca3a320d99b7ffdee8026ece166b107b28c7d9b218600d31b579d9595cb3
SSDEEP

3072:8uku22wuj91H3p9a+4WLS9hFCANk8xt3uNPsjp0zwyxiwASUccG4ap6C/FX3ByW5:8Tu91jDz3CLJNA6jCkqlAS0Haj3yHUV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e1016571e7b0910f6d6f703e792f113ea2e74927edbd22078cc7461b858c2d83
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ