home

02_unpackme.exe

MD5:
e2c268158c67a9ce29d1dad2dd2424d2

SHA-1:
fd65bb8e6572d73a37ae309c9c5c31cf6abb4f7f

SHA-256:
222adfc5dffeea1f79656ab800c761dd284ce6473d9a7965d2be808cf4914cba

Scanner detections:
11 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/26/2024 4:57:33 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Suspicious
7.1.1

Comodo Security
Packed.Win32.MUPX.Gen
16841

ESET NOD32
Win32/Packed.UPXLock (variant)
8.8739

F-Prot
W32/Heuristic-210
v6.4.7.1.166

IKARUS anti.virus
Virus.Win32.Small
t3scan.2.0.127

McAfee
Artemis!E2C268158C67
5600.7002

NANO AntiVirus
Trojan.Win32.Banload.eptx
0.26.0.54268

Rising Antivirus
Trojan.Win32.Generic.12639B58
23.00.65.14917

Trend Micro House Call
TROJ_GEN.F43BZD6
7.2.262

Trend Micro
Possible_Virus
10.465.19

VIPRE Antivirus
Trojan.Win32.Packer.Upx-Lockv1.0
20972

File size:
201.8 KB (206,676 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:cdNnrpC6MxCVxIpaVBGit8mahVPpdfViY:8Rs6MzaPG+uh9pdfcY

Entry address:
0x7E000

Entry point:
60, E8, 00, 00, 00, 00, 5D, 81, ED, 48, 12, 40, 00, 60, E8, 2B, 03, 00, 00, 61, 8A, 7D, 60, 62, 62, DB, 6A, 62, 62, 62, EF, D7, EA, 70, 22, 62, 8A, 49, 60, 62, 62, 9D, F7, 8D, 70, 22, 62, E9, BA, F2, F2, 9D, F7, 8D, 70, 22, 62, 49, A1, 6D, E7, E9, 60, 62, 62, 8B, E4, 62, 62, 62, 6E, 2E, 0D, 03, 06, 2E, 0B, 00, 10, 03, 10, 1B, 23, 62, 62, 62, 62, 69, 27, 1A, 0B, 16, 32, 10, 0D, 01, 07, 11, 11, 62, 62, 62, 62, 6C, 34, 0B, 10, 16, 17, 03, 0E, 32, 10, 0D, 16, 07, 01, 16, 62, 62, 62, 62, 69, 21, 10, 07, 03, 16...
 
[+]

Entropy:
7.8894

Packer / compiler:
Upx-Lock 1.0 - 1.2

Code size:
196 KB (200,704 bytes)

Scan 02_unpackme.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.