4a574c8f0a8714832f75952af36eb61c2713d04ccb06639956b4ad4d75f9565a | Triage

Sharing

General

Target

4a574c8f0a8714832f75952af36eb61c2713d04ccb06639956b4ad4d75f9565a
Size

4.3MB
MD5

40994e68a8b5a3c3ba777e52230dc796
SHA1

b7e84b45fe0e3144bbe96b0dc9c7318665345102
SHA256

4a574c8f0a8714832f75952af36eb61c2713d04ccb06639956b4ad4d75f9565a
SHA512

13960eb245c7252be641f7d98dfb8a77144dc52184a04cd3d341e3b1e4ed31dc36fb52b09a72e43e28f9792acc393b255a61b4416abc422c4a6c7591dc3ae22c
SSDEEP

98304:E0KeS6+L+/8eKC1hnwiaRoN1naNH7CeTQHIyBOC:XV+S/8BYwiF6me8o

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4a574c8f0a8714832f75952af36eb61c2713d04ccb06639956b4ad4d75f9565a
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE