ea971ba83b9e2000c1d062e7b25a6cc748b67e478950ed989e55456b58c36cdb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea971ba83b9e2000c1d062e7b25a6cc748b67e478950ed989e55456b58c36cdb
Size

28KB
MD5

2b091639b528dd4331e7cf02d61d9a18
SHA1

7be45458732d3cecf625aa2a6ee4af67c54cb5e9
SHA256

ea971ba83b9e2000c1d062e7b25a6cc748b67e478950ed989e55456b58c36cdb
SHA512

128f17efd51274f87200558a74df494c973754040beae35a196120e418280b628c833720734312b7ebfdabcbb507d58a5ba605f454f8b4418b7bd60c713758bd
SSDEEP

384:Bxlzsixau7nVSbpx2x9kkx6hbM3UtvxBOF1zGw9v/srs7JeNeSo3g2U0jfEu7WlC:BDzsix9nMbHzm3qbOF4CxJ3+0H+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ea971ba83b9e2000c1d062e7b25a6cc748b67e478950ed989e55456b58c36cdb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ