e949d103fd3e1e5074b5e3007803d5a0938ae9772746dda85bc2420ad18ac024 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e949d103fd3e1e5074b5e3007803d5a0938ae9772746dda85bc2420ad18ac024
Size

19KB
MD5

0bb3d958ec2d27d2713b22c9156022c0
SHA1

e0f213bf9c85d932d6e81c89c3b6cacda1e6b8d9
SHA256

e949d103fd3e1e5074b5e3007803d5a0938ae9772746dda85bc2420ad18ac024
SHA512

a3fb2ecc369c6bfe56e1e0204383b45b51447ce07e62ff45e3ba7310cf4acc77c03bf77b3911d67f06a9744d82b9576402706a55d38918722071c5e39365a65d
SSDEEP

384:SCfxOf2pVOCIZFzgJ9qrCTG84mj8o57J6/jO8krbV5MNTJ4u66:SuOf2OVbgJh34mjjJD8knV5MN14u

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e949d103fd3e1e5074b5e3007803d5a0938ae9772746dda85bc2420ad18ac024
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ