e2bb1059c4c7d35506c56dadd084568f0b3358330191ce15abd53240dc0d61f0 | Triage

Sharing

General

Target

e2bb1059c4c7d35506c56dadd084568f0b3358330191ce15abd53240dc0d61f0
Size

729KB
MD5

10f41e99d9358767638c111daf6c35e0
SHA1

737c6e8dab11d4682e366a9b1a6bfabd057eba51
SHA256

e2bb1059c4c7d35506c56dadd084568f0b3358330191ce15abd53240dc0d61f0
SHA512

ada52508bcaf126c4c926630b8e8caab94010a66b805e71eb132bffb14e63c9c982ea3f48799c0eace92145da84a30dd85f2d493df94abc577b380117fbcaac2
SSDEEP

12288:8Db/rbpa6Fddy43eiUMSYjlpXS6zVFqsEVDVj+ek1PxXHqyq+Sb2zQnmvvo3:8bbpa6FXyiUea6zNEVDV6eAxXKyq3aVA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e2bb1059c4c7d35506c56dadd084568f0b3358330191ce15abd53240dc0d61f0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 723KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ