6d90e78dfedb1a068d39c34051afcd6b6d98a4f43d7203d570a514f170f984b6 | Triage

Sharing

General

Target

6d90e78dfedb1a068d39c34051afcd6b6d98a4f43d7203d570a514f170f984b6
Size

4.0MB
MD5

d2f19c27bbb3a335ab0593c3c879f07c
SHA1

e67b70dd4a81f46fb7294f4e1053a19e6aed1d86
SHA256

6d90e78dfedb1a068d39c34051afcd6b6d98a4f43d7203d570a514f170f984b6
SHA512

316511f2015110b8e2dfe7ca1c7955572e0dd343223fbc2c445dadd932cfd69c19fde42bc74f1eade3d1ad9e47e134d433f6df5c68d58ecf0e3757aad5d057ee
SSDEEP

98304:tc4Z1MAB6reRQ5r2Trf36ER1J6u6XbmANDaG4n1x45:tcUMAB6reRQ52fSEHJHaClGGS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6d90e78dfedb1a068d39c34051afcd6b6d98a4f43d7203d570a514f170f984b6
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE