e0a3ec2f0acb361018ef666f7700d818b2bb8feca8cc2e160724e9dc35d898f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0a3ec2f0acb361018ef666f7700d818b2bb8feca8cc2e160724e9dc35d898f2
Size

29KB
MD5

220519ea6cf111b269989bd2fab42db6
SHA1

6c3e3b415dc79e553032d4177767d4bdb5d3baff
SHA256

e0a3ec2f0acb361018ef666f7700d818b2bb8feca8cc2e160724e9dc35d898f2
SHA512

9740780fdc123c9131c1df52aea131f71f39f0622dd035316d675a92acf52db63228ead7a5a11a52a2f0c7440a5f66d3a4f0f71b9cf9772b1d6106390561c943
SSDEEP

768:epKhIzD2I3sL4ePHh2+yygTM/hkBZvvvBzxbwmpKx9TZ2a8FmB0/Mt6w:eZDp3sXf/y/M/W3QEKfZ2a8t

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e0a3ec2f0acb361018ef666f7700d818b2bb8feca8cc2e160724e9dc35d898f2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE