A7A0AF99F5B4ED92F74ABDD2B8FAFFD270A821DCE3AB8EC164D6D17DD46D2BE0 | Triage

Sharing

General

Target

A7A0AF99F5B4ED92F74ABDD2B8FAFFD270A821DCE3AB8EC164D6D17DD46D2BE0
Size

4.0MB
MD5

657879c2babd84a404ce7429cc867ce1
SHA1

0e22e3303cf80847335257647467149cafd84f72
SHA256

a7a0af99f5b4ed92f74abdd2b8faffd270a821dce3ab8ec164d6d17dd46d2be0
SHA512

e5bd207e533440a23dec2351cd24a4bcc52325cf9b101c15cec7f2d935450b740097640cdb0fc5191e10b40d4f6437a8b5e0e87361bc5c22eb19f4eae76fd8f0
SSDEEP

98304:NL6zJsMASU6Mfm4bH2vf7emPW5U4S/4KDS3A1BqCW:16t/yHMzNua94K

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

A7A0AF99F5B4ED92F74ABDD2B8FAFFD270A821DCE3AB8EC164D6D17DD46D2BE0
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE