e02e58f1b518500a7803c70ac642060f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e02e58f1b518500a7803c70ac642060f
Size

91KB
MD5

e02e58f1b518500a7803c70ac642060f
SHA1

9b1b6bcaadad644fdf0ae6ca8b09c445fc9fb42a
SHA256

e2f73dfa4845e194abf8775eb9543d98eae22b7cf4fcca4b321c00266944ac98
SHA512

d74a81822df90e68e34d3f69e8df47217c25d2b11ed8bd8290559193f4c7b98b1236a8993574e973383ed972b4e1ff3fe82122c6359b552f539ab7f48eeefbd9
SSDEEP

1536:wpJAN0EksLRt1PaAd8PTb50RJ/RNkfLmPCe8pQMhvnkeXYiAjBU7Np5Dt7Z77E:gJAWEkmRPaAd8PZ09NkTmP18pjNkejdZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
e02e58f1b518500a7803c70ac642060f
unpack001/out.upx

Files

e02e58f1b518500a7803c70ac642060f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE