ecf28ba572ef1eceae675a468c5915e0N | Triage

Sharing

General

Target

ecf28ba572ef1eceae675a468c5915e0N
Size

174KB
MD5

ecf28ba572ef1eceae675a468c5915e0
SHA1

cdcfd1882dd4e6778c72160d005ea7e48de73aad
SHA256

89bca6b04cd67c01e4cbfc6cf09f9e17098022b9c458826852b2b8db117965ee
SHA512

ce133cc0fb7ca42fc406fa36da109262f7ecdf7ef1b295bf463e9d8c80bccaf41839b01d4ff5a89ae3eaf6f8ddd9c0d06b41beea31dd9b77bf15bf2d67fd3a01
SSDEEP

1536:V7Zf/FAxTWgGpGHTWJGpGtljFEwOxW3o/v7V+3:fnyKpmpWljKwOgobY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecf28ba572ef1eceae675a468c5915e0N

Files

ecf28ba572ef1eceae675a468c5915e0N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE