eb29956993dd3c9a5b398b2d47093b765322ca2fd64afe905c3201efba374185 | Triage

Sharing

General

Target

eb29956993dd3c9a5b398b2d47093b765322ca2fd64afe905c3201efba374185
Size

88KB
MD5

a05d7826807ac1c13b8dc978bb4c2450
SHA1

3d86b1f9cf2d7377573e1ca9ee622b6a18dd0ff1
SHA256

eb29956993dd3c9a5b398b2d47093b765322ca2fd64afe905c3201efba374185
SHA512

3527b83b5bd1e4885a66a8b85d396eb8ae072d6d8b9581e06494c021ede6173c47a337c7d83432c6f2bbae5ef6200ddade14547bbec22701b19ef51e4e32ff9a
SSDEEP

1536:ivexs6j3J/9liQqErRCFgN1zDJ3okFph/CPTKv:kc7J/90QfGCvJ3oLT8

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

eb29956993dd3c9a5b398b2d47093b765322ca2fd64afe905c3201efba374185
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ