16594a149f94a457a6632229907fa0cb563ca721bf56269589b5b30b5e533049 | Triage

Sharing

General

Target

16594a149f94a457a6632229907fa0cb563ca721bf56269589b5b30b5e533049
Size

4.0MB
MD5

dce15bbfb07770396657559967376512
SHA1

dc304a1c63438d68d5119f4d32686755cbfd9dd5
SHA256

16594a149f94a457a6632229907fa0cb563ca721bf56269589b5b30b5e533049
SHA512

506bd0ffbdc45dd42715d1f3db137a519cd84ad92e586e97c4d2df42d76724f6812eb411a04fcd5c88a846b679444184f772288c2f5d140b070f5d8345e3cc01
SSDEEP

98304:7glwHcj3DzCFvF5fHJONWhf65jgvyNeApnW:7gwHcjTeFf/4Wh8NNW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
sample	upx

Files

16594a149f94a457a6632229907fa0cb563ca721bf56269589b5b30b5e533049
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE