e62933b6889bd8a8d9c3258314b5953043924225d816f6b5185aac8fd265f9ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e62933b6889bd8a8d9c3258314b5953043924225d816f6b5185aac8fd265f9ab
Size

502KB
MD5

3bfa97b785285da16bae2e65858205f9
SHA1

53f095581ffa64faafd5d798bbe2951601ed8def
SHA256

e62933b6889bd8a8d9c3258314b5953043924225d816f6b5185aac8fd265f9ab
SHA512

770af8c8a42dfbce3b5a9c78189d80110a00ee0dc9b343bd2d54922b8b91c36bd0708120080781677b9abbd9583bed644b9b31256cb6f2f1f3543882b3ae932f
SSDEEP

12288:AbGB4nAKCNEKZcdaGqfzsz1ea8OEbh9KMqtI7QFj:AbBCN1cdaGq4zUa8YKsFj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e62933b6889bd8a8d9c3258314b5953043924225d816f6b5185aac8fd265f9ab
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE