ea88e33a2214002f72f7685e791293de51a4725a93f75642e6f2ebf2947fb51b | Triage

Sharing

General

Target

ea88e33a2214002f72f7685e791293de51a4725a93f75642e6f2ebf2947fb51b
Size

989KB
MD5

efb9d9e47526ba3c266ba33ec2fc37e2
SHA1

04e98a98668f1932b89d646073c52b167fbe6310
SHA256

ea88e33a2214002f72f7685e791293de51a4725a93f75642e6f2ebf2947fb51b
SHA512

bdf222b2a593251a4cf9847e234064019155bc7de76853b45b7ea34aa51b1ebff7b693bdbf90002b1b3d4c63d29fd23122251dc6516d8b1590bcb1b05084d05f
SSDEEP

24576:mL10fZbynemp1x7IDF1SHT4fmM/9J7ujGNLqWQp:s3nlkK0fNDCCNO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ea88e33a2214002f72f7685e791293de51a4725a93f75642e6f2ebf2947fb51b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 973KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ