ee663212a83bb64c61faa13862ffa836d0f8e593b1ad2bfdbee42037a7afd056N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee663212a83bb64c61faa13862ffa836d0f8e593b1ad2bfdbee42037a7afd056N
Size

37KB
MD5

519517548defbb65997f4e713d97a220
SHA1

4d8ce6143292c451ffda669895f1304f005e669f
SHA256

ee663212a83bb64c61faa13862ffa836d0f8e593b1ad2bfdbee42037a7afd056
SHA512

ff9335f195d2953bfeba439e0da8852b0fc8d1d35e34b3f87c457147957a774d805a6a058a1c1c2d11344979d0e58e9cadc3dc6eb07a0ecaaeee06391eca2640
SSDEEP

384:Oj/3On5QCMUWTSjuTB3tHER4RWaDW7R2tx7PdR3wqIKl6LaNniIjHbHB:Ojf3XB9JwL7RCZRAanrjH7B

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ee663212a83bb64c61faa13862ffa836d0f8e593b1ad2bfdbee42037a7afd056N
unpack001/out.upx

Files

ee663212a83bb64c61faa13862ffa836d0f8e593b1ad2bfdbee42037a7afd056N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ