243BACA4A8F3AC352178DE14A7E42CB8C7EFD6C9FB28B69F02D74C94C01E3D5E | Triage

Sharing

General

Target

243BACA4A8F3AC352178DE14A7E42CB8C7EFD6C9FB28B69F02D74C94C01E3D5E
Size

4.0MB
MD5

4d0c2d3161793029bd7dbdfd94488430
SHA1

fdc170777583a1c6a7d0d4608bddce96017bb0b6
SHA256

243baca4a8f3ac352178de14a7e42cb8c7efd6c9fb28b69f02d74c94c01e3d5e
SHA512

e1104d1f4cde400de14c23ade666c92ddc2af967d78d014a7d89ca687b70ac593546ea30f10d83842823d1feeb57d7ae18b4ffce21eb7f8ce53f04787a69c2ab
SSDEEP

98304:1CVi1mYiIYJqflMXYKdcfqv69U0qBEebh9v:WLYiIYJcDKyq69Krv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

243BACA4A8F3AC352178DE14A7E42CB8C7EFD6C9FB28B69F02D74C94C01E3D5E
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE