CA7B669A8647E7AA43E9A8B0DC2C540B06C378DB43EE4C477B56B47966CE0D74 | Triage

Sharing

General

Target

CA7B669A8647E7AA43E9A8B0DC2C540B06C378DB43EE4C477B56B47966CE0D74
Size

4.0MB
MD5

39ec6856f25ae35e4730a711c33bd659
SHA1

eb364c6f1fa9d1e2efd2479dd9ba31422107b840
SHA256

ca7b669a8647e7aa43e9a8b0dc2c540b06c378db43ee4c477b56b47966ce0d74
SHA512

b6ddf7daa8a90348d036ec6ad430a659cd32c6c77df12b37f8fe072e98fa094236e1d5f248dc0d439bfff1de0f7b34b1d4c80c6ddab49454063ca2ad7b428cfd
SSDEEP

98304:4SSLM7QSgXlB97JhyeKXRBtbHu7QbVDeucYco1HXx:4SH7cVBJgpbHuGVIs13x

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

CA7B669A8647E7AA43E9A8B0DC2C540B06C378DB43EE4C477B56B47966CE0D74
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE