ef7d3db91ca76bd856059f1022c529f29f2294b775f29d77f2e8c0b06c7f1331 | Triage

Sharing

General

Target

ef7d3db91ca76bd856059f1022c529f29f2294b775f29d77f2e8c0b06c7f1331
Size

90KB
MD5

3b8df8fb9fef7d92aad4929c4053aa40
SHA1

3116dcdc972887b98f88e31c588479c80210d62b
SHA256

ef7d3db91ca76bd856059f1022c529f29f2294b775f29d77f2e8c0b06c7f1331
SHA512

de91fe5216f1564987c061e4f41c8b500474aaf5246d716dfbae5aa2d719b9923f06c3a0432a91a8c2e73776e4f756e1ffe786d0a67acd5161dd6cc341dfbd6a
SSDEEP

1536:2S04UU/OkI/00XeIezMK8GDMtxYYXGlw1fIrGnPwqkULDdnSjgOrypT7FaFP:2JU/PeX8zRMrYYXGC1w695HdS8OrypY9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ef7d3db91ca76bd856059f1022c529f29f2294b775f29d77f2e8c0b06c7f1331
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE