ec2e1bef1f89032aa8dd766b17dd8e49e09ff95a8b3c5cfb43a556716cbd43ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec2e1bef1f89032aa8dd766b17dd8e49e09ff95a8b3c5cfb43a556716cbd43ff
Size

363KB
MD5

ab42fefa843be20ae358b2b67fc457be
SHA1

d37482013fad622e02a8056336e48d418b2fcaae
SHA256

ec2e1bef1f89032aa8dd766b17dd8e49e09ff95a8b3c5cfb43a556716cbd43ff
SHA512

917a0fb85df9e6b9dcf78db12d46d2929c3a96feee8f53fde1a4f3c041fc834eebf5dab8fa10b5982f71ca1fca8af532ee3c1b9dd391d3b677aed60865946a8e
SSDEEP

6144:gjOBx+oZd3ZsF9utnMZGavxWSs2fO72RDGMUU/lNd5emwPWYY8M3nR+kLXolfTLm:gyBDsF9utnQGa8h2fOultNjbw/YT9i7i

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ec2e1bef1f89032aa8dd766b17dd8e49e09ff95a8b3c5cfb43a556716cbd43ff
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 604KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 335KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 560KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ