63ae4cd56b6422c37f470dcacded5897cfc9c557f232cd07b2f98608f91b7a14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63ae4cd56b6422c37f470dcacded5897cfc9c557f232cd07b2f98608f91b7a14
Size

110KB
MD5

74b548de877580e8ba90ee7405d3fd99
SHA1

fdef2c7253d04163c58756846780c9d72416f38f
SHA256

63ae4cd56b6422c37f470dcacded5897cfc9c557f232cd07b2f98608f91b7a14
SHA512

a8637bbd4c8231cc0527abc461889663eb4939e9b9c6002802187d6f87ea296155360b42728ab2d208eb853754fb65c486f8200ee191e1c98d114396c5c23e34
SSDEEP

3072:txlspB5WB5DYID3gy3kYeLNY6Z5vH3bGiqJKKGvBoutQg4:Zsf5WnbDLk5Yg5Hrk4ZoSR4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

63ae4cd56b6422c37f470dcacded5897cfc9c557f232cd07b2f98608f91b7a14
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE