ee99d2f592a7a139ca2190f251a470bcdd49d4e08bfa6da1cffba7dfcb7a582e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee99d2f592a7a139ca2190f251a470bcdd49d4e08bfa6da1cffba7dfcb7a582e
Size

18KB
MD5

0567b9207daafb820f6e1bfba82b83a1
SHA1

0b78b02fec3cf6f5012a4e5494af6cddf4af1064
SHA256

ee99d2f592a7a139ca2190f251a470bcdd49d4e08bfa6da1cffba7dfcb7a582e
SHA512

54f1bf0d401cee0282d349b7fa3317ea023c2b50bab9fa032399c11a1a0435ad8bfd8b31bb830ebf30a2bcdb61d6d46f858d7db36cc6ebaab9db16ee05e8d8f4
SSDEEP

384:FhCsKVeJScf9xyxVQvWbGykQxanfpgGJwDAc3urPrdE8kGx:H9Kavyxa6GDQ4fpgGJwDv3CPhx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ee99d2f592a7a139ca2190f251a470bcdd49d4e08bfa6da1cffba7dfcb7a582e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

time

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE