6933433c4293fa2245731bcfd927b2e34578549ecb8108a5a24fe1dcc6468d0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6933433c4293fa2245731bcfd927b2e34578549ecb8108a5a24fe1dcc6468d0f
Size

16.5MB
MD5

1ca5743802ca4b3dfdb04644f0249366
SHA1

103b70ee3f1c70301dc6e6f8d50b38102f38d813
SHA256

6933433c4293fa2245731bcfd927b2e34578549ecb8108a5a24fe1dcc6468d0f
SHA512

d1099baf7e941d5ad1e3bae29d1cb8cccf74ec5f3e1dffd4717ae7dc3318a677cd2f254e5c4b901f3b83c2a2ae2ca4bc0375a8a3d9268ba22c2dba31f9243e5a
SSDEEP

393216:p65xokU8YXfusOWMXY2eTE5VkH/VJS3bon2kKc:IsPPus6X2gO9JS3O21c

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6933433c4293fa2245731bcfd927b2e34578549ecb8108a5a24fe1dcc6468d0f
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16.0MB - Virtual size: 16.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ