CDB870D70E759D8E517605735ACE7F369F1E6DD34D97C24D1C5126712ABE417B | Triage

Sharing

General

Target

CDB870D70E759D8E517605735ACE7F369F1E6DD34D97C24D1C5126712ABE417B
Size

4.0MB
MD5

fd5e87b78fe103afc5a36d7001e3b3cc
SHA1

172eaa9630c6adc93af26f4a5408bd71048a440a
SHA256

cdb870d70e759d8e517605735ace7f369f1e6dd34d97c24d1c5126712abe417b
SHA512

83dd4de45e9dd3231ad44904ea8c9cfa61c467b36ab40ed5542c1b7b3d73c837653d195e32860d4ef3b8fa1aa4089c06cb3e435415061e724fcaaecc2d4dae8c
SSDEEP

98304:9i+SkE1sSZkPfuac5hFB1sEdw6MS09+dF8x98La:JpE19kXuFj1s2X3T8fc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

CDB870D70E759D8E517605735ACE7F369F1E6DD34D97C24D1C5126712ABE417B
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE