eafac36683e2e352ddb5bde839d065f4e4bac6c2b289fc832fd235b21c911ccf | Triage

Sharing

General

Target

eafac36683e2e352ddb5bde839d065f4e4bac6c2b289fc832fd235b21c911ccf
Size

34KB
MD5

738dcf3e6c6254364620523f12bfa0a4
SHA1

8ce1c7c406345b432f7305065bb337071de911c1
SHA256

eafac36683e2e352ddb5bde839d065f4e4bac6c2b289fc832fd235b21c911ccf
SHA512

323877c8420f0b43e2e1270f6816c8823b58a86d1b9ba1290e32ff3eeab2cb750ee8f28b7c3a40efa68f25b648f0c4ed31b3ae81fec2d4602008a93f46385572
SSDEEP

768:Ber2rc6Kpwhqqrv1cnhCF08CjgaxrCzMK5jKGEkw/DM8TH3O:BcJQqqqAtCTxCz/zWrH3O

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

eafac36683e2e352ddb5bde839d065f4e4bac6c2b289fc832fd235b21c911ccf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BY С��
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ