5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504 | Triage

Sharing

General

Target

5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504
Size

4.0MB
MD5

ddc1b0b756ffb0414681a694ab7112cd
SHA1

17cdbd770ffb9201a7774590951f4bb963e48586
SHA256

5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504
SHA512

f4e6e3f0f4043db1554e50cfcbb283861f86105767294e7b38192eaa1678701f46789698ea3c56bf9fde963dd8770a5fa3ed492fa1e17f8d3e021e433c5bd7f9
SSDEEP

98304:/U9hVt6s4kZFhhC0kkmk152yaKix5dg4Lu:sr4k71tmAFaKixD5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5e80c2bce756b181e8ef6c8d66d01291415522844acbf0c8b6607743d2d52504
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE