13e3a662dca14bc7962cf41c51224bead8722a58000b4b0e2f6e65d420e02d03 | Triage

Sharing

General

Target

13e3a662dca14bc7962cf41c51224bead8722a58000b4b0e2f6e65d420e02d03
Size

4.0MB
MD5

956a88fae33446099370f3d0f4fb32fc
SHA1

a4b17747852605693c5e8589421debda67b3af7b
SHA256

13e3a662dca14bc7962cf41c51224bead8722a58000b4b0e2f6e65d420e02d03
SHA512

753f8d6ade5e33faa761bc78c1b764bb951e51a41b15a1644615fc3910628ff25b19305a5a86b993aacd860d079278bb3c51a28b44aa1a1a7950c26194c11755
SSDEEP

98304:GS/b382lN71hxh3XikxD81cgqGFJo8ntsgy2k7+QN87eLR7ViC:t/L82l1nH3Xi06lqGFJBGgm87eLDi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

13e3a662dca14bc7962cf41c51224bead8722a58000b4b0e2f6e65d420e02d03
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE