ec3d0b7a5ef5d022bb9f79df0d71f9cd2662b93c9737e849d9876f5a6087e6c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec3d0b7a5ef5d022bb9f79df0d71f9cd2662b93c9737e849d9876f5a6087e6c4
Size

54KB
MD5

df2739d4a36210b2e6f3a1402dee3c45
SHA1

bb623b29804a29a540aa9ba1defd29550f4465fe
SHA256

ec3d0b7a5ef5d022bb9f79df0d71f9cd2662b93c9737e849d9876f5a6087e6c4
SHA512

17af52183e73231be645c42d77ef7a09ec699d9a2fe7c1eb0e51ab5bc75fa3f63be61453bad9fd0f2d8d3f6753be1dc53414f22c8905d0b696f1249d9ad9f1a5
SSDEEP

768:2ea3/Ln9fn89rQxtUwLYLrHGbzCH7nUEfiVIVXAt2rh1usAea8kIRfQK1UdManHZ:2eyDn9nZUMoBU6/wt2gxefQKamaHjd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ec3d0b7a5ef5d022bb9f79df0d71f9cd2662b93c9737e849d9876f5a6087e6c4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE