eda9218f211c21cf1d81558f5914e642fe92ea576c48412332c1581f46fdebe7 | Triage

Sharing

General

Target

eda9218f211c21cf1d81558f5914e642fe92ea576c48412332c1581f46fdebe7
Size

318KB
MD5

09afb6315ba1452f3d0ffae47821205c
SHA1

f93fcc4e79a7b71695963fd3cdd2ce35b1079c28
SHA256

eda9218f211c21cf1d81558f5914e642fe92ea576c48412332c1581f46fdebe7
SHA512

73e266218d1c5c6ddba62dd65b27164b481ddc60701ff5705bbae1779d61a9b00fd2967b509ba41383d4c15562481e55e86e0680cc0d1148d6128d61ab9c9b19
SSDEEP

6144:URu37cAKFknfyAtb2gEvefnHEIuuX8a8nBC5jVLiwZI82VgQh875J:Ukcrgf0efnHEIuu3YspPZ9A6tJ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

eda9218f211c21cf1d81558f5914e642fe92ea576c48412332c1581f46fdebe7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ