1FD0C0264A04B86FE176DF685B3E20D0CAED5553BF01341CDEDDF78E12BEB212 | Triage

Sharing

General

Target

1FD0C0264A04B86FE176DF685B3E20D0CAED5553BF01341CDEDDF78E12BEB212
Size

4.0MB
MD5

6450ec52b7be89e6cd6c00f40da86d13
SHA1

68ef838e84576868ba5a32606e19e3b02c7e9842
SHA256

1fd0c0264a04b86fe176df685b3e20d0caed5553bf01341cdeddf78e12beb212
SHA512

ade9670a146970ed6d9455c778baf8c34329da6420192df8f484f4c9ccb9cad8aedef2daf80040799fed4c37155d0b7bc2b2fbfa0f1b54c3f756cba7782aa6ef
SSDEEP

98304:MJG5Di+xypFMcj77V9gSF09HdsOn5J8wtK8iij/X:MJkXxwFMGfrC9HE/SX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1FD0C0264A04B86FE176DF685B3E20D0CAED5553BF01341CDEDDF78E12BEB212
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE