1eb893ce2d832ed92786f4f5ac51e4352f389c9e2d421daa06304ae5d7baca5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eb893ce2d832ed92786f4f5ac51e4352f389c9e2d421daa06304ae5d7baca5d
Size

150KB
MD5

f167a68f32c5be67c7c4d321dd052495
SHA1

4a87c6f1cc7149edbfbf8170cdd46b0fbf3372ca
SHA256

1eb893ce2d832ed92786f4f5ac51e4352f389c9e2d421daa06304ae5d7baca5d
SHA512

d4377c87171069a5122b9bf951777e7a512bf60366de666d839297409fa56e8932b01f45d608dc7cb0884afb71a3419bb76b8091e29be0e9dbde2ab66a1919cb
SSDEEP

3072:n9emNWrFazqt6D3XXpjcdHerRRHxpXYxyzNxiEys1X3cL2Iuk:n9ePr8tD54d+rRRDzn/y+RG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1eb893ce2d832ed92786f4f5ac51e4352f389c9e2d421daa06304ae5d7baca5d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 409B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ