ae1716ff43102106d5590bacf8efd954ed817bd5c3de94518111b4981dd8ee3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae1716ff43102106d5590bacf8efd954ed817bd5c3de94518111b4981dd8ee3f
Size

4.3MB
MD5

97dddd2646651b33ab20c300e15c3133
SHA1

9066775f35ed770c92e91e5ac9c71260c8c0b3eb
SHA256

ae1716ff43102106d5590bacf8efd954ed817bd5c3de94518111b4981dd8ee3f
SHA512

e771358ff3b0eb38854f21bfa1c7beaa392dea9d9f0846c9c699efc14f51b2cc77bb895c1d019c82036f49c71907f53ca42b35a87ec90feb07eb227cfa852191
SSDEEP

98304:O4Rd3CYzmMdhfGf00qe+EAUjxVSKfo4bJtMPCwH2eF:/Qu7hfNl5CJu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ae1716ff43102106d5590bacf8efd954ed817bd5c3de94518111b4981dd8ee3f
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE