38db8f1fab6ff91d80655882acf4ecd85f5c6d525b033a683ab7999d2bb184fe | Triage

Sharing

General

Target

38db8f1fab6ff91d80655882acf4ecd85f5c6d525b033a683ab7999d2bb184fe
Size

4.0MB
MD5

b61675436e4f0836e5b6472213dca491
SHA1

17a0a030b9f720c6763ece3e3560e004ab21b2fc
SHA256

38db8f1fab6ff91d80655882acf4ecd85f5c6d525b033a683ab7999d2bb184fe
SHA512

be41fdfe464bf54ba8fadad6f714be0bbe9de406979a9a902ff05b2cb0ebf74a5eb9944bc04a5a8996db4850c5a14d0689c4f2744cd389f84edc9336372ef7ae
SSDEEP

98304:Q14Y8uQZcC+0H880EywqLDoOP7qt8ItkvWxnlqkbrXtUGuZA63:Qh8/Zx1H30EKLkm29x3X56

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

38db8f1fab6ff91d80655882acf4ecd85f5c6d525b033a683ab7999d2bb184fe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE