e292a6c4baf4e0325e208014fbd903e8b17e13ab3142fc2e11223b516870fdfa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e292a6c4baf4e0325e208014fbd903e8b17e13ab3142fc2e11223b516870fdfa
Size

127KB
MD5

f61b442db2c3f9ace12e16335e8f1bfc
SHA1

a7450247ba3cc2fcc23369b84852f78ba573a930
SHA256

e292a6c4baf4e0325e208014fbd903e8b17e13ab3142fc2e11223b516870fdfa
SHA512

d20a722ca9c6159abeaf2b92ee5303547f7bdb388c86b90a4c8688bb1d38b126f561166800e936ec1e04f87f7bbd73858de942c07834feb49299dc0a2b716a2f
SSDEEP

1536:eOnBsEN86kra/5l/HA0ghbYeqdOaIPIP40YXSPb1/BQtSwit31fXG3jIIO3:HtksybYeqd7IwPdJPbP8Swq3FOW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e292a6c4baf4e0325e208014fbd903e8b17e13ab3142fc2e11223b516870fdfa
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ