C8EB102C1E6C7053FC13CCFBA225967DE93AAD98F6E196CB3D2993A2C2561AB1 | Triage

Sharing

General

Target

C8EB102C1E6C7053FC13CCFBA225967DE93AAD98F6E196CB3D2993A2C2561AB1
Size

4.0MB
MD5

cd9fbd4ff095452f930a81105f2540e2
SHA1

690eb532bc2c98ba6634d99dfe35114fdead8f73
SHA256

c8eb102c1e6c7053fc13ccfba225967de93aad98f6e196cb3d2993a2c2561ab1
SHA512

3c2e0e6aacd0df6d8b170ab1cde6e85e806e3c7fd15831f9f8af2c6378e3e4e6ca4c43bbacbe5b754ebcfc2c224933080f7884a5ec02128502a7112b99de83b1
SSDEEP

98304:OyQDwcE7XcvFuMUnrnjimu8JbXLgz9uJwHiApUjtvV4O:zQgXuu5rjg8FXLIuyor

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

C8EB102C1E6C7053FC13CCFBA225967DE93AAD98F6E196CB3D2993A2C2561AB1
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE