eeabb354c4aa6f1442cc3de22a6e968af4f68d5e3fab156f8ff3d6549a9288b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eeabb354c4aa6f1442cc3de22a6e968af4f68d5e3fab156f8ff3d6549a9288b4
Size

29KB
MD5

31c1dd2e954ca07c6eab00497d7b2b80
SHA1

65ad8a851e8dc83c3208be45d1bfdbada16e1653
SHA256

eeabb354c4aa6f1442cc3de22a6e968af4f68d5e3fab156f8ff3d6549a9288b4
SHA512

0171c0a2a795da287c5bbd6fb92acc1d2443ac13f577a4c79f82578d0ea1c4500223256d907bde89cef30ec4de57580c5d78df5a2a3ae18fb286d2ba0ac9f47b
SSDEEP

768:KFvd1+sKUS9NjmCuO9lzrcXui7Ituzss8Jppk+1:E+soNmC7VrkIj1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

eeabb354c4aa6f1442cc3de22a6e968af4f68d5e3fab156f8ff3d6549a9288b4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ