ec6b5aa82aad0b654d22c8fc9b00d312bee0791ad61af0b98cb3b1a9a44ae93d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec6b5aa82aad0b654d22c8fc9b00d312bee0791ad61af0b98cb3b1a9a44ae93d
Size

60KB
MD5

a0d24bcf07ed31075241d626db462eb0
SHA1

3d157a7edace0eef63c69a3110395944decbf567
SHA256

ec6b5aa82aad0b654d22c8fc9b00d312bee0791ad61af0b98cb3b1a9a44ae93d
SHA512

885c15978cb4e9e433c05cae826743cd8e0c7a8aab3aeddd257b788e63c704f7da6e9242dc56d03982a479347e17e58385676925e7e923027ad03492fe1e3ae9
SSDEEP

1536:5yhmMyoK9xXPe1WNUdCRyXwXSb8k4qjO/CqO23K37uI7Z:IK9wJ8PqsPO2cuId

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ec6b5aa82aad0b654d22c8fc9b00d312bee0791ad61af0b98cb3b1a9a44ae93d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 340KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE