ebef55c6ce599f455c1417a8538cee503acd1158c0a74d8268f2cebb278c1b9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebef55c6ce599f455c1417a8538cee503acd1158c0a74d8268f2cebb278c1b9e
Size

192KB
MD5

c9777c118de1ca5e2ea7118cfed6b89e
SHA1

375155d9ae07c6c739cc53f21b3c0d817c83dd73
SHA256

ebef55c6ce599f455c1417a8538cee503acd1158c0a74d8268f2cebb278c1b9e
SHA512

62a62bb3cc51f96a580d9c03f7d141d13ab01665b003a4774c7d4b4d5836e98d68033dabb4e5d0ba7f8cd58062161dd598345fe252204eb685c0dc55b7672478
SSDEEP

6144:1VYmoP2D+6u6e1t0kOSsQjJ/LSgEQbPAjCcmd:f2Pn6uN/0kOSsWJ/ZEQbA+cu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ebef55c6ce599f455c1417a8538cee503acd1158c0a74d8268f2cebb278c1b9e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ