119e5bf72d68c4881a5dfb0a40c85c32adb85cc7f09071c92fdf03b736d66165 | Triage

Sharing

General

Target

119e5bf72d68c4881a5dfb0a40c85c32adb85cc7f09071c92fdf03b736d66165
Size

4.0MB
MD5

2c90b9bd2f5103e4df4d5232ddf4fd33
SHA1

3eb10051b0159a5a0d44432e2fe2abf33eb1c931
SHA256

119e5bf72d68c4881a5dfb0a40c85c32adb85cc7f09071c92fdf03b736d66165
SHA512

dad76f2c6b57840a34cb55f20eec964114b5718f20deeeab0d0f7a70f7a413b46d9ead6bbdbcb92f9751e69ff858897ea98d822ec972bcd1a7adaaed5a12e002
SSDEEP

98304:aCeeAAnUp77XRvoo9us1vEFk9rAN3HEq8b0ZM37k:aCvAAqjf9d1vNE3HEvb0ZMr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
sample	upx

Files

119e5bf72d68c4881a5dfb0a40c85c32adb85cc7f09071c92fdf03b736d66165
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE