e16e08b3351383783a3dbd72f1bb847baaa8a0cab167c93c384ac723e57bf6b0 | Triage

Sharing

General

Target

e16e08b3351383783a3dbd72f1bb847baaa8a0cab167c93c384ac723e57bf6b0
Size

85KB
MD5

2e1a710f1ee6485d2c19a75e1982359a
SHA1

dbd7a0cd3a74a080c1366e66efcb367260210a90
SHA256

e16e08b3351383783a3dbd72f1bb847baaa8a0cab167c93c384ac723e57bf6b0
SHA512

e2221d9201311559c2ed877fd7eb6a98b1432f93ddd4baf76ddbcdace96b3757100e533a309e9fcf437dbcda9ddd1b3a8c0e3852a48905ccf00c09951ca2dad4
SSDEEP

1536:kIijj1hg7lGi1cMHRG8UlR/mMFzlJ2VP11pCXVTG0CqPUf63qQDNWJ52/rp:kfj47lGkcORlInNlEVDpgVG0Cq063FDT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e16e08b3351383783a3dbd72f1bb847baaa8a0cab167c93c384ac723e57bf6b0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ