5071C135D8AA0B3CF69CBFB33E92BBAE12DC268C5E84352B34D69086EA5959B3 | Triage

Sharing

General

Target

5071C135D8AA0B3CF69CBFB33E92BBAE12DC268C5E84352B34D69086EA5959B3
Size

4.0MB
MD5

c45c37b5c35f7a8c3ba1f13ce362e5ca
SHA1

fc8e227bf949afc326ebeac4fe5b6bb52636aa86
SHA256

5071c135d8aa0b3cf69cbfb33e92bbae12dc268c5e84352b34d69086ea5959b3
SHA512

b386b7bb22a42f0675eee4ad7467a28d5df3cf5b104750d2a39aa806256ed93648e77d56e0f7c733be5f9f2bed67d6be1b047cc553d207de62eaf855451b8b16
SSDEEP

98304:zpZQLXWk6RJSUsMd+iOUTkqxZVBJNicYxy9ZsanAzBjWJbKKF:9ymMUsMIbUTkqpBr9PApK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5071C135D8AA0B3CF69CBFB33E92BBAE12DC268C5E84352B34D69086EA5959B3
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE