06C516356DDC80F2BC0597E1E2CA3D742F793F6E8D0279D52EE7D934D8FFEA33 | Triage

Sharing

General

Target

06C516356DDC80F2BC0597E1E2CA3D742F793F6E8D0279D52EE7D934D8FFEA33
Size

4.0MB
MD5

b5b398afec8de0e46409861ce5d3b414
SHA1

ede37228e3dad90559bc34cb2f778e00e2d06cd8
SHA256

06c516356ddc80f2bc0597e1e2ca3d742f793f6e8d0279d52ee7d934d8ffea33
SHA512

2c5d13341f2825917fc63a76e6e5aafd81170f0b49e372e9a2303f116b75f0ab5b1f332ca8eac52dcff47cdd2586c17f989f692d25de596144a4795dc748772e
SSDEEP

98304:O+CSMkAdFT3gQlnz0gCmRSaCnLIvjA1RS9nid9CeI2Ykazc1EOiq8H:9w3gQlz1TRInZm1izC721uH1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

06C516356DDC80F2BC0597E1E2CA3D742F793F6E8D0279D52EE7D934D8FFEA33
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE