ee2b92564b51daba69969e8b1d060b92da53c5b1fb6a088c01214626cf5ba6ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee2b92564b51daba69969e8b1d060b92da53c5b1fb6a088c01214626cf5ba6ae
Size

418KB
MD5

4e0e756127e7398957b31f720a7b3495
SHA1

e89e0ae3067aa387725f6db0024570c75596695b
SHA256

ee2b92564b51daba69969e8b1d060b92da53c5b1fb6a088c01214626cf5ba6ae
SHA512

b1caf4f2c4897c0d0e7ee9d483c2bc3a0f9684b9b9d899cf35ea33d8f513e928f75a8955f9feb573506777254257e28d726a06f2307a65a2dc3b88718576a876
SSDEEP

3072:LmVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZL2H:SM7jJljxYTHYZM1vKH

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee2b92564b51daba69969e8b1d060b92da53c5b1fb6a088c01214626cf5ba6ae

Files

ee2b92564b51daba69969e8b1d060b92da53c5b1fb6a088c01214626cf5ba6ae
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE