e6dd98b806d96152feffc1b63f668ff6170ac0775dba50b9137aed014207de6a | Triage

Sharing

General

Target

e6dd98b806d96152feffc1b63f668ff6170ac0775dba50b9137aed014207de6a
Size

36KB
MD5

1db07d4db344a81c253be2e631caca80
SHA1

7cf1f2dc479f289cb41feadeb6cd22c5ed2dc12c
SHA256

e6dd98b806d96152feffc1b63f668ff6170ac0775dba50b9137aed014207de6a
SHA512

787376663c2b4a4fc969ce49fcfe5ca777607268456505d3a197bc291a1e7c5de407509a99e729fc9f2e8bf158f45c38b9a2c9f4d885644bd45ad95ffb07d8d7
SSDEEP

768:g5BOFKksO1mE9B77777J77c77c77c71BXg1NJff6w0XFkhc7mvmyJV95/1B05ANS:g8Fs+DB77777J77c77c77c71BXCJUqsL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e6dd98b806d96152feffc1b63f668ff6170ac0775dba50b9137aed014207de6a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ