ec185837e2c651e387ac4f49d6e172c793c1bcb2e493ebb9a800249656d2df51 | Triage

Sharing

General

Target

ec185837e2c651e387ac4f49d6e172c793c1bcb2e493ebb9a800249656d2df51
Size

1.2MB
MD5

c20fe4f4b03aa040b1bb166d28765eaf
SHA1

af9ad071dfe6c1c16bf000d777710a6d8aee8124
SHA256

ec185837e2c651e387ac4f49d6e172c793c1bcb2e493ebb9a800249656d2df51
SHA512

8f79ba5275971ef8eb6bd16ba98c6db89cd45a475bff78062a94f62673dc7d18839e3ba5b02147baebad484838f6adcb30ac6b66d5b8ae43b9e84ddffd58317c
SSDEEP

24576:N/rrMYs71CVzJrg4vX3IHmNSx8VDBEwjK6wT8coLKqg+BsimJcwm6Al:NDr5s6rX3hNSCxBEF6BOXSrWql

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ec185837e2c651e387ac4f49d6e172c793c1bcb2e493ebb9a800249656d2df51
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ