e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf

General

Target
e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf
Size 332KB
Sample221207-d8e5zaca76
SHA256 e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf
MD5 cccebd168586a80c5487b5484ba10b5c
SHA1 5ddce6a45510c23b0cb3f9ead6f778f0f53dd781
SHA512 0e31b3ce23a9f5213713ab44847ee63e6fc2c49027db0cd5bedfcd557911ca548078a75a83d81411972b409681dcfe46438d537b3c43cd484ac55e0f33a606b4
SSDEEP 6144:QNWFxVdUQWtGK0YswzCYEJTSvbqzTJVnIzke1aXK6XredjzjgtY:VFxwQdK0BwbE06TbIzkecXXXredjAO
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf

.exe 332KB
out.upx

.exe 393KB

e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf

SHA256 e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf
MD5 cccebd168586a80c5487b5484ba10b5c
SHA1 5ddce6a45510c23b0cb3f9ead6f778f0f53dd781
SHA512 0e31b3ce23a9f5213713ab44847ee63e6fc2c49027db0cd5bedfcd557911ca548078a75a83d81411972b409681dcfe46438d537b3c43cd484ac55e0f33a606b4
SSDEEP 6144:QNWFxVdUQWtGK0YswzCYEJTSvbqzTJVnIzke1aXK6XredjzjgtY:VFxwQdK0BwbE06TbIzkecXXXredjAO
MD5 SHA1 SHA512 SSDEEP

windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

550784

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 449501649cab8051f2ddded45b0d517e26ff6634d9b377b35f5f8b55c2b1a758
MD5 4a25ea7df1965cd07713f0f5da777e7c
SHA1 1bc34ac599846b3cdc45b85033af3e982c91d285
SHA512 a1d2b1ed3e2a2fdd8ff7696cc4a2b89b2dfaca3611ad2476c1edc9c0d152f24cfd9254c3641cb49187e554d3c89486aa8b5487f4171211a72f3b83d82e4910ef
SSDEEP 6144:ylsjTrftDVymfH6xtjh/zyqyXYCm0XJ9I+SoHnE2YZO2/H5I6E0lzjgt:yloVVymfabZNyrmNpMnE2oz/HJHA
MD5 SHA1 SHA512 SSDEEP

windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

499712

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.rdata

Size

120KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

49KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

116KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

72KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

22B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

e6333061fefb062b22d5cc62151fe065b501e175ecd849a873135ca6661a68cf

out.upx