ecf6bf34dcc9be7919c1e867cc619029e5c51051acc09aaef68e19f801bf63b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecf6bf34dcc9be7919c1e867cc619029e5c51051acc09aaef68e19f801bf63b5
Size

1.0MB
MD5

b4b9cd5a5c64d59c5f47ecddf268567c
SHA1

3c6fac856dd3092cc8124e45db6a2161f3c5525a
SHA256

ecf6bf34dcc9be7919c1e867cc619029e5c51051acc09aaef68e19f801bf63b5
SHA512

e9beab5237ad6618f7780658786f98a2deb462a726294d779f6f6614bc7ae50ce992f12ac5c4a24c5f6aa6cc82e822cdc5f44585a207c936742adfbd7d68e870
SSDEEP

12288:v1XRp7OalYewS/BI3MeSGT/YluwkNCTt/rYmAJZCzHVz3Jj8eGooS:v56aSPS/BIceSGT/YljpLqZgweG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecf6bf34dcc9be7919c1e867cc619029e5c51051acc09aaef68e19f801bf63b5

Files

ecf6bf34dcc9be7919c1e867cc619029e5c51051acc09aaef68e19f801bf63b5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 533KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE