0edeb4215b7cf1066bd6494658f1282a8f9e8c19e446086093db22f80bfe29b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0edeb4215b7cf1066bd6494658f1282a8f9e8c19e446086093db22f80bfe29b2
Size

34KB
MD5

6e389b6b5e5e93b33a8ee53ac045e480
SHA1

c9a551635add0151852c08e3c85cf98765d5a751
SHA256

0edeb4215b7cf1066bd6494658f1282a8f9e8c19e446086093db22f80bfe29b2
SHA512

5a309437224fa15f3f2ebab9b1c1143439d129d8e23928f52f9c2813883e3899d0e362c7b1b0f5528770a3c30c906ac259d6f0a9e4acf36f7be4c712f3bc615a
SSDEEP

768:SCIqdH/k1ZVcT194jp4cBWAVIookP09Zl0:SNqaLV8a6cBjV0P9Zl0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0edeb4215b7cf1066bd6494658f1282a8f9e8c19e446086093db22f80bfe29b2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ