ea6bd2a1b2dc8f9c101a2bee24a2ba26dce033ff9cfe011790cc9f380db5688e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea6bd2a1b2dc8f9c101a2bee24a2ba26dce033ff9cfe011790cc9f380db5688e
Size

652KB
MD5

37d8b6ee81feffabd02190de1b82c5d3
SHA1

9bd08e5a2759cc9f066fad38d94d806ff9d26b07
SHA256

ea6bd2a1b2dc8f9c101a2bee24a2ba26dce033ff9cfe011790cc9f380db5688e
SHA512

fb0ad64b398a923c7f5c8b907567d2ecc7658c62c7cb67a14f4d81583a14e3f8c469ce28a1d8947b268d96f0c84119639051183209be2f8cc38ffcfdfd775ce2
SSDEEP

12288:4dd1LRINtbd8EeQMhDYv1/fjsyIQxvUMEZbrHN0Lj68DP1p:4Pmr5VFcYvVsyIQWXn0LmQP1p

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ea6bd2a1b2dc8f9c101a2bee24a2ba26dce033ff9cfe011790cc9f380db5688e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 728KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 646KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ