ePSXe[.]exe | Triage

General

Target

ePSXe.exe
Size

1.1MB
MD5

872758758a24197b047897a2dfb2f0e0
SHA1

a76e3b5dbc9a616387bb15eaeb8c08b113bb1f91
SHA256

dbe587de79c9e939e5f5c03164c432382b6645616cb5d070a2d605ea647f416a
SHA512

8e81f27f07dccda56256701087bc3203abd77fd7bf4a0330632b2d8ec5a15fad5282609b0297db330d7feeb71cbb60e759fd6e9005d4f3ea8f5b6fa5885e0654
SSDEEP

24576:K5+EfUdg3OAK9DDKU/fJ8PjkbR8+iuwMkVQb6CiZ:K4E8a3ClfJ8PjEbiurT/

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

ePSXe.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 959KB - Virtual size: 16.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 20.2MB

UPX1 Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 15KB - Virtual size: 16KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 161KB - Virtual size: 161KB

.data Size: 959KB - Virtual size: 16.8MB

.tls Size: 512B - Virtual size: 13B

.gfids Size: 3KB - Virtual size: 2KB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.reloc Size: 129KB - Virtual size: 128KB

UPX0
Size: - Virtual size: 20.2MB

UPX1
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 15KB - Virtual size: 16KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 161KB - Virtual size: 161KB

.data
Size: 959KB - Virtual size: 16.8MB

.tls
Size: 512B - Virtual size: 13B

.gfids
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.reloc
Size: 129KB - Virtual size: 128KB