715dc74adfac4d2125f1e2774e3a65f36b421d8a0463d59a2b60fbb72a238d07 | Triage

Sharing

General

Target

715dc74adfac4d2125f1e2774e3a65f36b421d8a0463d59a2b60fbb72a238d07
Size

408KB
MD5

63ff4a65058db31514ae6e8adcfdd8c5
SHA1

1de6eb4898dd97bb398ee4cfe002bac4d6832d19
SHA256

715dc74adfac4d2125f1e2774e3a65f36b421d8a0463d59a2b60fbb72a238d07
SHA512

444f3c472b0a83cd7d10400c01a52538cc0d0af151cb86c45a99dfa1c8e6069a919facebccedc38eae3b6cc002d2d68b2ad1aa458dee8de036bea5e268e1de89
SSDEEP

12288:GODgXTwMb2t0N0tQ5+cJgX0t2t3cKZKxJs0B:D8Xmt0+tQ5dgzuEC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

715dc74adfac4d2125f1e2774e3a65f36b421d8a0463d59a2b60fbb72a238d07
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 324KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE