ecc8c8db03a33f1c1870db08b3a175ae39521fdc2aa211ac224bf1653efd46a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecc8c8db03a33f1c1870db08b3a175ae39521fdc2aa211ac224bf1653efd46a3
Size

817KB
MD5

7178b4ea7c6635b47a1f35a73a8ee8c8
SHA1

225f589f678f01c28d273ad7e7a57360388f8870
SHA256

ecc8c8db03a33f1c1870db08b3a175ae39521fdc2aa211ac224bf1653efd46a3
SHA512

505fd0f1b6c70e2d6c243f46028cab1cdb90e0b1c64bf51ee6f43c3ec7e51bc749f89b0c38ca5eddfd58d87ce5d906f76d0cb85bb2beb42202e698c61181274f
SSDEEP

12288:jgLjJo626GH0M89ceA4IMOegaml6gzX1B38ADRF7q7+cPJAJYVMBrU7jUodhtD:jyo6MdmIRegLl6gzX1CM74BdGBUJtD

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ecc8c8db03a33f1c1870db08b3a175ae39521fdc2aa211ac224bf1653efd46a3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 687KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE