2BFF550A227075C93BBA82011BD93ECE59362E598D1798BA0628FCD26388CFFF | Triage

Sharing

General

Target

2BFF550A227075C93BBA82011BD93ECE59362E598D1798BA0628FCD26388CFFF
Size

5.7MB
MD5

ad9ca349e8b1412e0568450f765ed1ae
SHA1

8a4bfd970cdab6d8098d50fd4f99cd639a5f1047
SHA256

2bff550a227075c93bba82011bd93ece59362e598d1798ba0628fcd26388cfff
SHA512

5d1cf60255bd135e0212e55709d64e2ae9ccced644180145d408dc12edb5e50c33b0c165bf8c1ce8d7fa5267799de1c7e64de4e411bfdd828ebbca4b42f05e6a
SSDEEP

98304:QcE/QL1EJ3nNj8kIaJeWQpOrZ5+D8X7aG6q+DNQmqfKLV0mgIg:ZE/QL12e2UurZoQuGV6QhfK5/gIg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2BFF550A227075C93BBA82011BD93ECE59362E598D1798BA0628FCD26388CFFF
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 14.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE