ec52124adb4cd74080a424ce27a1d71e0d1107c010b0346f2dd5c8aae2f8b261 | Triage

Sharing

General

Target

ec52124adb4cd74080a424ce27a1d71e0d1107c010b0346f2dd5c8aae2f8b261
Size

22KB
MD5

96984d9b6d6801a76ae1fd76fdcfec53
SHA1

9a2a139f8d3ed444bf931b7071ad221a862ec4c5
SHA256

ec52124adb4cd74080a424ce27a1d71e0d1107c010b0346f2dd5c8aae2f8b261
SHA512

a1c667e9c3fca63629f59ae043d0c302842a1b8ae5c57f26052c4fc50c06877abd07faef8eec5f13956df0f6de914a1b08824e0191b41d995f5d3fee6b98c320
SSDEEP

384:EqqG6jBoRZjpWJnlSDXVbHxFFSUviPJgSBnc1APUwKWFCCg7o61:FH6KRZjUB0DtTqcSPUwKCCz

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ec52124adb4cd74080a424ce27a1d71e0d1107c010b0346f2dd5c8aae2f8b261
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ