e12efd237e39e3fbfe5694b9e7779dc2cf25b3c431e57339cf261aecfb476ff8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e12efd237e39e3fbfe5694b9e7779dc2cf25b3c431e57339cf261aecfb476ff8
Size

4.0MB
MD5

61e9634301c99d11e85514d8452d9489
SHA1

4cd915a2be6a486e8c0e5b5d7c98a35e049a1596
SHA256

e12efd237e39e3fbfe5694b9e7779dc2cf25b3c431e57339cf261aecfb476ff8
SHA512

3992ec8cfc8c894d22088955c14084872052707627521807aa80d292f0f72158b2a7cde7163d9ba939ab6f39f6cde209474ecb09755fcb3a9f99c839cb40ebe8
SSDEEP

98304:VZcY/26ZiugOr4hw8uNmCf3iXS7UBc5xyYZMABX:AY/2huVr4hXCf3VHxyYZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

e12efd237e39e3fbfe5694b9e7779dc2cf25b3c431e57339cf261aecfb476ff8
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 11.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE