c54d2aacce9189738b999d035cf4b25e99827423c09dcc536d47ee8f7c03c8c9 | Triage

Sharing

General

Target

c54d2aacce9189738b999d035cf4b25e99827423c09dcc536d47ee8f7c03c8c9
Size

5.1MB
MD5

4453f603eae9deaddd8c832a9d1dd567
SHA1

c6ad9363c5068123cfad3e508697aed16901cd57
SHA256

c54d2aacce9189738b999d035cf4b25e99827423c09dcc536d47ee8f7c03c8c9
SHA512

af50f0702523eaced58f4337089ddb02683a0cbd76cb914e24804e8917fd68c63fbbe35daa26a06b44cb5be6400b55a40e846e1c10889f7c2e91a7677e4fe7bd
SSDEEP

98304:HnbAD7HxVesWFT3xEDb0Ctk5bBEAtzaTDZvdoorFyw+J0NktM2EkeWheU2zDq0T:MDrx7W7Wb8BoRyz1M2EkeWheUAq0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c54d2aacce9189738b999d035cf4b25e99827423c09dcc536d47ee8f7c03c8c9
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 13.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE