Suspicious 91% Download

jaffacakes118_4a55c758f94831bf080b46c3c9b2da026b84b678e03f2e0a6383d14426f2cbc1.bin

UPX packed, stripped, high entropy

Sectionless high-entropy trailing UPX ELFStatic sectionless ELF with a UPX banner
SHA-2564a55c758f94831bf080b46c3c9b2da026b84b678e03f2e0a6383d14426f2cbc1
URLhttps://tria.ge/api/v0/samples/260926-c5h7savtcw/sample
MaleculeO₂(As₃Al)H(Cm)Md₅(ArBi₄BkHe)Th

Evidence

ARM architecture from ELF header bytes 0x0–0x140
0x07f454c46010101030000000000000000.ELF............
0x100200280001000000f816010034000000..(.........4...
0x2000000000020000043400200003002800........4. ...(.
0x3000000000010000000000000000800000................
0x4000800000e5a80000e5a8000005000000................
0x5000800000010000006016000060160300........`...`...
⋯15 more rows
UPX packer banner string 0xa18c–0xa34c
⋯5 more rows
0xa1dc000000ef7f00a0e30170a0e3000000ef.........p......
0xa1ec50524f545f455845437c50524f545f57PROT_EXEC|PROT_W
0xa1fc52495445206661696c65642e0a000a00RITE failed.....
0xa20c24496e666f3a20546869732066696c65$Info: This file
0xa21c206973207061636b6564207769746820 is packed with
0xa22c74686520555058206578656375746162the UPX executab
0xa23c6c65207061636b657220687474703a2fle packer http:/
0xa24c2f7570782e73662e6e657420240a0024/upx.sf.net $..$
0xa25c49643a2055505820332e393420436f70Id: UPX 3.94 Cop
0xa26c7972696768742028432920313939362dyright (C) 1996-
⋯14 more rows
Canonical trailing UPX PackHeader magic 0xe424–0xe4c4
⋯7 more rows
0xe49477bc7800000000555058210000000000w.x....UPX!.....
0xe4a4555058210d170e0aa6d20df14fa814aeUPX!........O...
0xe4b442ca00008b3b0000feac020050000061B....;......P..a
0xe4c4a0000000 ....

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.