e90f1301b29fdfaf2ba5ea2e3528db3a953afc039b2b59fe61ec32e62a63a103

General

Target

e90f1301b29fdfaf2ba5ea2e3528db3a953afc039b2b59fe61ec32e62a63a103
Size

605KB
MD5

d8892ca1f84f7c4318fbe51450fdbbc9
SHA1

1d8400f2c01de49b4cbeb3631a7994a6d6ef99c1
SHA256

e90f1301b29fdfaf2ba5ea2e3528db3a953afc039b2b59fe61ec32e62a63a103
SHA512

e50c44d29c0253f862bc924419ba1114e6e760f37c6d233e9d3b79cd340212b8b34682959ab7c21964b71fa0c6cf47f1d49c11f57f6990932de299945b27fbdb
SSDEEP

12288:tzDM+kg5NzgCShn51/w+wfIszThbk2+lGL/UEgMD2WoHExwQ8t61z:pDM+bN8CMn5i+wftThbkLloME7ifUwt2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

e90f1301b29fdfaf2ba5ea2e3528db3a953afc039b2b59fe61ec32e62a63a103
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 596KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.1MB

UPX1 Size: 596KB - Virtual size: 600KB

.rsrc Size: 7KB - Virtual size: 8KB

Headers

File Characteristics

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.itext Size: 5KB - Virtual size: 5KB

.data Size: 35KB - Virtual size: 34KB

.bss Size: - Virtual size: 27KB

.idata Size: 14KB - Virtual size: 13KB

.tls Size: - Virtual size: 52B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 87KB - Virtual size: 87KB

.rsrc Size: 371KB - Virtual size: 371KB

UPX0
Size: - Virtual size: 1.1MB

UPX1
Size: 596KB - Virtual size: 600KB

.rsrc
Size: 7KB - Virtual size: 8KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.itext
Size: 5KB - Virtual size: 5KB

.data
Size: 35KB - Virtual size: 34KB

.bss
Size: - Virtual size: 27KB

.idata
Size: 14KB - Virtual size: 13KB

.tls
Size: - Virtual size: 52B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 87KB - Virtual size: 87KB

.rsrc
Size: 371KB - Virtual size: 371KB