21e72be7f818e2afd4d53ee8f16c7e4a4718a95dd75b90d83fa26181e426f578 | Triage

Sharing

General

Target

21e72be7f818e2afd4d53ee8f16c7e4a4718a95dd75b90d83fa26181e426f578
Size

1.7MB
MD5

65ddbe9b2581fb5acdfb40a27478ce59
SHA1

7c00e3d480ab839d1e7b51de4f31f08759ad7201
SHA256

21e72be7f818e2afd4d53ee8f16c7e4a4718a95dd75b90d83fa26181e426f578
SHA512

074c87912dedd24522b70ee8f32024613b97e7b5399ba5e6d1b7c0892f2918c3b956bdd5b4d556d195796b528de152d8cf47ae5f8ef45af169996808bfc29115
SSDEEP

49152:eTvt1GjeX+xaFTx+IJPPpU4XOulXn8djKj:eT7zOaaqPpv8d2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

21e72be7f818e2afd4d53ee8f16c7e4a4718a95dd75b90d83fa26181e426f578
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 4.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE