435fc9b33de841f4de6074b8477909b6[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

435fc9b33de841f4de6074b8477909b6.exe
Size

2.4MB
MD5

435fc9b33de841f4de6074b8477909b6
SHA1

26e819d8761e7fa07e3e714e22c133fe133d46c0
SHA256

d5677e48fe9f6e8a86f7d07b0e0eb5fac2eba9f05642ee39398b9bdb6fbf72ce
SHA512

ad04af9acc4e03883ae6d603caa772d41bbac70ae1e6c7758974a4760a5063d2e0b3960d556a2f0f721e323b0dffce675d5eca3b8fc060d49041c65bdb3043c6
SSDEEP

49152:MyEgJlCwxfyMwP/JwzmyOEcNlYioCBjTYPolyrkcf4ChVojONmAcf:MyEgy4fjwP/+cl9BHOFAChVojON

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

435fc9b33de841f4de6074b8477909b6.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE