570D17864E861BFB93373CCC3A708F1AC7DDC2EF7EC40DCD45253F1B99BBA42D | Triage

Sharing

General

Target

570D17864E861BFB93373CCC3A708F1AC7DDC2EF7EC40DCD45253F1B99BBA42D
Size

4.0MB
MD5

27d237745dac895b5d08bcc11e5fc4d8
SHA1

063d948755ac6ce64a1281e79fcaef7dc25cd12b
SHA256

570d17864e861bfb93373ccc3a708f1ac7ddc2ef7ec40dcd45253f1b99bba42d
SHA512

51fdb307806811b5bccf9f4f5a59b69808eb74c867af52b66a52f6b17be5024390a4329a455c69ad9430c220531a22506aaa2f32c56e5ec5fdc3f66c07fb7e70
SSDEEP

98304:zAsEi+B2vAn9+F395NvcnbRRb94KoJIIpQ4cMBI7ZgD6di0lvTNpHxh:zAsEevAwF3+bRTcJICQMmqDUiGT7Hx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

570D17864E861BFB93373CCC3A708F1AC7DDC2EF7EC40DCD45253F1B99BBA42D
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE