bb9825ce07edbfa28a058e68bbd97ada4c2fb73cee3ffca3b60cd992dce2fe4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb9825ce07edbfa28a058e68bbd97ada4c2fb73cee3ffca3b60cd992dce2fe4b
Size

15.6MB
MD5

c45f4785f3071901288747dd335c4d89
SHA1

09cc026084a250e4faeeb56f4cc86a2b9c6eb37c
SHA256

bb9825ce07edbfa28a058e68bbd97ada4c2fb73cee3ffca3b60cd992dce2fe4b
SHA512

4c4704af8b6d5122d793cb2a28e0b546c6fde8449b4593117c9c177b33d5dc927033f02b66eb76ae9d391cc7aa073faa92a532dcc0334a8bc04029efdb1b3a2a
SSDEEP

393216:HhQvuDVv0PuiZnaXesFlOUs4dir+c9sj:HhuuDOPNlaX1FlwfI

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb9825ce07edbfa28a058e68bbd97ada4c2fb73cee3ffca3b60cd992dce2fe4b

Files

bb9825ce07edbfa28a058e68bbd97ada4c2fb73cee3ffca3b60cd992dce2fe4b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

UPX0
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

UPX1
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE