f0eb8d56321e91fecf216ea9131a0f91c4b65c415f28ab74a1eadd619f5a89ee | Triage

Resubmissions

08/09/2022, 09:43

220908-lqds7aebf5 10

03/06/2021, 17:29

210603-cpqc9any56 8

Sharing

General

Target

f0eb8d56321e91fecf216ea9131a0f91c4b65c415f28ab74a1eadd619f5a89ee
Size

639KB
MD5

77b225694748c7e32027e367effc50f2
SHA1

9d1d0429278c19f011de630e85e49f1f2b3b3b9d
SHA256

f0eb8d56321e91fecf216ea9131a0f91c4b65c415f28ab74a1eadd619f5a89ee
SHA512

f3a3171364ec72e102d60a4e67a79e561517c18fe5272f3052098bb29c475783a7f97dc7caa1869c6cecf6f773d82919289cb55b9e9e2db76d1220fcc2aa766d
SSDEEP

12288:D6bgyIpda5YF3aPeo/Cg0P97/RtrcWAt88OFNkxObGrIT4MRuFnYo9t:inSda5YOJCg0JrcW/8uG4WXX9t

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f0eb8d56321e91fecf216ea9131a0f91c4b65c415f28ab74a1eadd619f5a89ee
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 638KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE