Powerfull-fud[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Powerfull-fud.exe
Size

2.5MB
MD5

4c0c3dd4ab8d557729c5bf4d38fa03bd
SHA1

d4c1abee2d4dc6bb0bd457a1630c0282ba9c641e
SHA256

076b94a0b653e5c2d074d2014c6d3f0adf575f22b997e12d3a767aa4fbfac411
SHA512

b1f2854f9a98eabf0dbf5194799a75603d101a1813a0e302697f7bdeb13ea6dd624086a73f2d2aa8d70909be29d968f9d32b8b0725108537573025e85be0ae22
SSDEEP

49152:NUadRV4/3dgccsKxJ5nj6GipJGDK0pmy5OqQqkOgz/ZH2SSeJa:SC6gccsK75njbWGDZmmR0ESrA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

Powerfull-fud.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 656KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE