F03B79750CDE13E72F6CB21F0450FA4A39EB80828D8B327D9823108155F34168 | Triage

Sharing

General

Target

F03B79750CDE13E72F6CB21F0450FA4A39EB80828D8B327D9823108155F34168
Size

4.0MB
MD5

793f61a2f24cfb4b93fd9543eb032372
SHA1

f9d7361458361485546a0ede3712f469e19c8eb8
SHA256

f03b79750cde13e72f6cb21f0450fa4a39eb80828d8b327d9823108155f34168
SHA512

25167074d26abc64844bbd8352ec8f0334e28d49b749fea367d9b129e0af6dd2e1622968c8d0a38486eb263b2c3ddae581adc309f58503a795cc0d22972bf728
SSDEEP

98304:F0ulX0cJeo6igUZLuFLMBreD3RILnU3lOFB1xzcVTktd:6ulX0cJG7TF6reD3GLqlOTUV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

F03B79750CDE13E72F6CB21F0450FA4A39EB80828D8B327D9823108155F34168
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE