Skip to main content
Unix & Linux

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

4
  • 2
    No mystery. It is a UPX-packed binary. Packed binaries in many cases appear to the file command as a statically linked binary. Commented Jan 24, 2018 at 4:46
  • @fpmurphy1 I came across it in malware a couple of weeks ago and albeit I recognised it for what it is, I was not aware of such technology since DOS time when I was a very active assembly programmer. The static linked binary bit here is more to document it for others. Have you really searched for UPX here? There were only vague references to it. I lost maybe 1h researching the subject. Commented Jan 24, 2018 at 11:30
  • Packers and compressors, of which there are a large number, are subjects that are discussed in some detail in any decent malware analysis course. Commented Jan 24, 2018 at 16:13
  • @fpmurphy1 I knew that from old times, and was investigating it for Linux after someone asked me to investigate a malware problem, and I found it was packed. Fascinating stuff for an old assembly afficionado. I have not dealt with such a low level for a while, only that recently had a technical challenge where I reengineered a couple of small binaries, and I enjoyed the challenge a lot. Commented Jan 24, 2018 at 16:20