FC6F916ED67E8E2828E460178C85980EF894B2099432F5AE2997F32D8A1291DC | Triage

Sharing

General

Target

FC6F916ED67E8E2828E460178C85980EF894B2099432F5AE2997F32D8A1291DC
Size

4.0MB
MD5

51576779f1423950ca7d529e2bc93eb8
SHA1

8ba5e4edf45b268964ddcd0a8997a663e72a8b39
SHA256

fc6f916ed67e8e2828e460178c85980ef894b2099432f5ae2997f32d8a1291dc
SHA512

ced352e7ef3fbc472148519b9859c2accfb1f6a359ea9e613766b9e5404762f7d01f003188dd16bcdbdd29a5f09afb92e81d5f03c617b26f84284494f7f8e080
SSDEEP

98304:0Jwgqe0tphc2WQJwpvUnhzVVyrNG9uL5YyCnsfXy:pgqzTK2Hmpsn5bqNG+5ZuWX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

FC6F916ED67E8E2828E460178C85980EF894B2099432F5AE2997F32D8A1291DC
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE