efcad4c3bb96421fdadba2ecf584b23411dad850f9829e2a2b260b50a70e5b41 | Triage

Sharing

General

Target

efcad4c3bb96421fdadba2ecf584b23411dad850f9829e2a2b260b50a70e5b41
Size

5.1MB
MD5

5d15e3d19d113b8d294f651691179d4c
SHA1

34ff7117d957ff59e9347e4d35d41f56658125be
SHA256

efcad4c3bb96421fdadba2ecf584b23411dad850f9829e2a2b260b50a70e5b41
SHA512

37dae570005e28c63e6707fd79e949cfb2c9d80b50933f361a43a1b29b3319f81db7c54a9c333ea009e362bf25f559c925bf4c9335d374d41408cc4e788b4650
SSDEEP

98304:DsbAKuFv+32OKY8PdFdZhHah3NyT0n045I6HwGKXd2ywNanq0YLw:DsbL4C2OT8PtZh6hGCZIQwG2YSq0z

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

efcad4c3bb96421fdadba2ecf584b23411dad850f9829e2a2b260b50a70e5b41
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 13.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE