e2e7c218c91c53e4baeb704a5731ee5344ee5d2f8d88c15fe4c63126495c238a | Triage

Sharing

General

Target

e2e7c218c91c53e4baeb704a5731ee5344ee5d2f8d88c15fe4c63126495c238a
Size

34KB
MD5

41d35b310e3a800383cf9c21b83a1c19
SHA1

f49cd06d11d73d4173d73ed9cb297e919ade63a5
SHA256

e2e7c218c91c53e4baeb704a5731ee5344ee5d2f8d88c15fe4c63126495c238a
SHA512

56b68e0c90030f430393c9980b04fc5de80247a57b66b03812cb0f42818a5607829a0cab33e69140330f06ee42b059c78b0920fee0577ba6647226f99a72368b
SSDEEP

768:kOi6PrMmjrYk12zggRJ9sx3vSVl86+txQ1y2AWcQKoQ4:kOijYfaRXcW1+WcQKg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e2e7c218c91c53e4baeb704a5731ee5344ee5d2f8d88c15fe4c63126495c238a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ