eb0017efb2f574a46e2506dce430db45e1dd186fd74a538c8e425dbcdb55a567 | Triage

Sharing

General

Target

eb0017efb2f574a46e2506dce430db45e1dd186fd74a538c8e425dbcdb55a567
Size

454KB
MD5

5f12bc8443c1a857af23feb14d1dbf5d
SHA1

651699c6ea34529f859386022e7b5c618e9a5bd3
SHA256

eb0017efb2f574a46e2506dce430db45e1dd186fd74a538c8e425dbcdb55a567
SHA512

6e84ca2b30424b4bbc17e72dc1a5f6cdf5e9995d6e2d366500ddef07ba1ba37b85c7b712161cce9f1b36898072d6ef3ea7673f9142c3a82486c15fb70eea4964
SSDEEP

6144:h2Xb+ACfAP7kL5q5BUXa9LCEEei1R5vqueef9/mdieBpuVD/ZKv2mz3mdO1MzyUb:kk9lkHtIRdqD89/mdieBpn2mbOWMFu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

eb0017efb2f574a46e2506dce430db45e1dd186fd74a538c8e425dbcdb55a567
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 944KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 417KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 768KB - Virtual size: 765KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ