73d7dc5e5c768e902ee28b0f1188cfec1f8a9e27f6c82262d71606f44f7a9404 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73d7dc5e5c768e902ee28b0f1188cfec1f8a9e27f6c82262d71606f44f7a9404
Size

14.7MB
MD5

849ad1e016ef48137610e858d5c9081c
SHA1

d2bfc9d793fb1d150ff3d649005063f96f22643d
SHA256

73d7dc5e5c768e902ee28b0f1188cfec1f8a9e27f6c82262d71606f44f7a9404
SHA512

235b672f014fb268fc01bc766947f21eedc247f0417d3317ce6410c8f3350076c32e069b1ea260824f4c94a0e3f1c029682a8b6940fb8ce45a7ac2e6c4f486ba
SSDEEP

6144:JYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UOm5Tq6M9Gjb5n:JSNC80I+cR3R03VseuOYTq6M9Gh

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

73d7dc5e5c768e902ee28b0f1188cfec1f8a9e27f6c82262d71606f44f7a9404
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gtext
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE