ec92d562ead62069d390261ad4f32d5ae2d9ca6722e9400b46af54c430e8b06a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec92d562ead62069d390261ad4f32d5ae2d9ca6722e9400b46af54c430e8b06a
Size

8KB
MD5

6ab7984b0df4f142f5a97c4824bed6c0
SHA1

5a8a5f063eaee0e3011fb54ec97aaa2443649163
SHA256

ec92d562ead62069d390261ad4f32d5ae2d9ca6722e9400b46af54c430e8b06a
SHA512

fe26724dc66d5a9f4f4e1095331d1efba4d31da1d2f45726bee6b134f31b0f16bec6c081d0123592c662f032e5e0b2d912d0b8069e94eae7ae9a753fe846011a
SSDEEP

96:Aokvl10GxW2FjJYPmVI+tTpMbCJBnp0BhVqn0U:Ivl10GPdYPmVI+tTpXu7V80U

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ec92d562ead62069d390261ad4f32d5ae2d9ca6722e9400b46af54c430e8b06a
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE