ecb4a6d44a6041a5dc9bded592e8f8de3842240bbd1172330d1e8b1a2e7f6cc5 | Triage

Sharing

General

Target

ecb4a6d44a6041a5dc9bded592e8f8de3842240bbd1172330d1e8b1a2e7f6cc5
Size

242KB
MD5

da672eb78f60d47f984b00c05d7c2f4d
SHA1

7b1f6136243708c1eb533c85786f85151bd998ec
SHA256

ecb4a6d44a6041a5dc9bded592e8f8de3842240bbd1172330d1e8b1a2e7f6cc5
SHA512

cc5b3e4b79c2bfc81a8ccc44a1b23e6d50aa2b57f24a143b69cd2b01241abaabd56e6b48a1d64381b76f5458efaa7e3ce709be38788eefbe91fc513fe8ee2b45
SSDEEP

3072:PuGAD8eS7z2r0Q6iDwIVQZqrIxewiHivbr3V8CtX38azF2FRl/H/oxZPQwYHx2H:PuWh+wlxewiCjr3Vhh3xERexdQwYHx2H

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ecb4a6d44a6041a5dc9bded592e8f8de3842240bbd1172330d1e8b1a2e7f6cc5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 201KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ