2ebab23931773cd328c983ca74057528516ad70cf903035078f2b9b6be01fe1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ebab23931773cd328c983ca74057528516ad70cf903035078f2b9b6be01fe1f
Size

204KB
MD5

529584e4b23d79e9990e980272954cc0
SHA1

747d9662c44b943ca528a935f86e87dfb80b02cb
SHA256

2ebab23931773cd328c983ca74057528516ad70cf903035078f2b9b6be01fe1f
SHA512

b972ed4636f98d1712f206b518ab7045000b8b819a001b1fbc005faf929165da59f62bddf1c98de0f235301098837d98aba1aac1c7691b7f7e1eaad153d2980b
SSDEEP

6144:wIUXBI0w4bPQmZ93R0hNblIaTkCcX3dKTN/:pUb7bFZ93RQlp1R5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2ebab23931773cd328c983ca74057528516ad70cf903035078f2b9b6be01fe1f
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 320KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 197KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE