eabe397ebdacb6323ebabdc5be57204cb74761a05bd78f10135758e8f1f55e3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eabe397ebdacb6323ebabdc5be57204cb74761a05bd78f10135758e8f1f55e3b
Size

34KB
MD5

abf2dfd7d6c4779df1672f93ff84392f
SHA1

75b7b6535875312d97e0479f3abd937dec5163d1
SHA256

eabe397ebdacb6323ebabdc5be57204cb74761a05bd78f10135758e8f1f55e3b
SHA512

7707e7efceb26a9f2203204d1657a9591d16df1cd09ecaa9c1370d04c49cb2cfc34c7c9605ea3d937a7766232d09c4dd9d62772a6661eb8f756cb0651d9568d8
SSDEEP

768:I+Qe+mvs0FmSMuD/dvWJrn3DK3NhdsrXs69ynkP6m:ae8SMuDd+fK3F6Xs6kkym

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

eabe397ebdacb6323ebabdc5be57204cb74761a05bd78f10135758e8f1f55e3b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ