240BEAB8739021F7C93F80B5ED7109CCEE81758B7CCBCE9B2872A899A57638D5 | Triage

Sharing

General

Target

240BEAB8739021F7C93F80B5ED7109CCEE81758B7CCBCE9B2872A899A57638D5
Size

4.0MB
MD5

9cf07eaca4171c047477469bc10be495
SHA1

cdfc46f7e3f20f8e94a541f7efab6843e9cab1ae
SHA256

240beab8739021f7c93f80b5ed7109ccee81758b7ccbce9b2872a899a57638d5
SHA512

784def8a3b46fc07fdb424ab23ead324a98f52a21edeeff2dd5d1caa6ac65663f56e690b1a524f99d9b606207edf3ca8d7606838d8fc8d8ae899a12db2e6211a
SSDEEP

98304:awn2FYbJEPoNaUde90QllW1qUuOgDOcEk6tT:hn2FYdE8WllWUNOcETt

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

240BEAB8739021F7C93F80B5ED7109CCEE81758B7CCBCE9B2872A899A57638D5
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE