edd4a569ef1690fe58b4efbabbb77b9808de2520cab643bfe2ec39ff043be791 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edd4a569ef1690fe58b4efbabbb77b9808de2520cab643bfe2ec39ff043be791
Size

70KB
MD5

232c7f3b4f65845da1281e9d6af6d5a3
SHA1

33ce228b9e397971af56b6a162cc01cf0f1b24e7
SHA256

edd4a569ef1690fe58b4efbabbb77b9808de2520cab643bfe2ec39ff043be791
SHA512

44a35edd848adeb214d3aba553cbb20ea0b2dcdfcfdc81130c88d8c5ce5659f415c66a30347ad2a24a52d4bee69bc74e4f474c4665c64f14c99fbe471514250d
SSDEEP

768:A/Lep26FL3AbneJgH7eCRSWjMetJwajrd0+K1psQ7YZxtbGde/M2sox37qC816Ig:SLu7UbMaW+K1psQ7ebCN25QRcwbRK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

edd4a569ef1690fe58b4efbabbb77b9808de2520cab643bfe2ec39ff043be791
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ