808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f | Triage

Sharing

General

Target

808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f
Size

4.0MB
MD5

41445d964ef31131dee871cf995e66b7
SHA1

76998a4554e14eba58835679d595a9573e407062
SHA256

808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f
SHA512

b010542e1e70cdd6f7af26e70aed19de5d9f9f04542fec4fda7b0c804c1bc5b8719bbbd782557da14bff80f49cbeeebf0c68ae644eaaec86e4db30a3a8421843
SSDEEP

98304:0KrroLuJQvtzFKXwn5anMXc8K29mMPtlb+f7P1uhq9ixhv5:1I0w5asK2AMFlKzPBMv5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

808c7ac049a188556fbd49d270f08875c68f37e7c5178c2cbf5ff5dfaea1761f
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE