e80f64e8f99abb49fd632bf8c45614a2[.]bin | Triage

Sharing

General

Target

e80f64e8f99abb49fd632bf8c45614a2.bin
Size

2.4MB
MD5

8be36c83eadebcdef104244dc2f06c64
SHA1

ac09713bd809b3d79dc9cb06bdffd8e9e7757024
SHA256

0c7f35b5fb5d4de46911a71c4b4f6860a01c46e5be02240fbd39538583c9ad17
SHA512

5065d9d8845a73d01999057aa306de2083e7c974158ec9ce96928b88cd0c68c05cc0526bd6fcfb6796d5cc995ec00b289b992ade57245cae1b1010ad3633e08d
SSDEEP

49152:5jXu3xtfkhDIp6rdE9RV8LB9HlxpbwFGVTyMKTEhNLTANW6Ws+v5zun0gP3J27RE:VXuhtfkggaF8LJPryMb8W6Uv5zeXP3Jh

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/33f7724e95023ea96f6d12626916a193cd9bef1598947b43605bbe12257605a7.exe	upx

Files

e80f64e8f99abb49fd632bf8c45614a2.bin
.zip

Password: infected
33f7724e95023ea96f6d12626916a193cd9bef1598947b43605bbe12257605a7.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE