4e4b837d44e4183046f30ffd78bf32a92851250f8ce12cc1f314c600397075bb | Triage

Sharing

General

Target

4e4b837d44e4183046f30ffd78bf32a92851250f8ce12cc1f314c600397075bb
Size

4.0MB
MD5

bb95e4fc983c8aca5f0dd8d05ecf1d70
SHA1

41abd3f03ec4c5944cb820f432b320611d94aed9
SHA256

4e4b837d44e4183046f30ffd78bf32a92851250f8ce12cc1f314c600397075bb
SHA512

f6a13f1acb62d1d4064d9b090742e713abd6c4f14bdb8d499609255001fc40033cab26d82f8254fd2f4a6429581edcb759b6fb8ed797bd3e9bc89394825d8171
SSDEEP

98304:esaFeKilMjHPQh72wtWi0Amv/8U6bQorIBK0HCE/jsON5tQgcfz:e1FhilMjHPQ1JQi0FH8UUIBK0HbsShcr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4e4b837d44e4183046f30ffd78bf32a92851250f8ce12cc1f314c600397075bb
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE