eb14fed40386a37b564683dabba339179283f11407a74fd8f2cdf4aa9909b6d2 | Triage

Sharing

General

Target

eb14fed40386a37b564683dabba339179283f11407a74fd8f2cdf4aa9909b6d2
Size

154KB
MD5

41a4d5cfafd3cb0efa03a140367cb8ac
SHA1

90e1f1361f30ec0792fc0c53f31f9ab517d66b6e
SHA256

eb14fed40386a37b564683dabba339179283f11407a74fd8f2cdf4aa9909b6d2
SHA512

819be17450b4d018f9660acbe7fec7133c9fa2d8b436d4e5db8ec1a27fff4ebc3e118588df4b03e85bba1f4e4c9e824c6b9eb1530777e374cfabe57b0c8085af
SSDEEP

3072:ZqpUfn63I6rYPEIeyxs0WViAiKIQPHJeGPKD59qLlBmSSs:Voz0sItxs0WVEKHHJev3s

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

eb14fed40386a37b564683dabba339179283f11407a74fd8f2cdf4aa9909b6d2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ