22ae2430709f13002f0e7e8657d2342eafc38d1b0006b367908ba7cca3bedb2b | Triage

Sharing

General

Target

22ae2430709f13002f0e7e8657d2342eafc38d1b0006b367908ba7cca3bedb2b
Size

4.3MB
MD5

0ccd7120436c5fbe07165dfe741a2f76
SHA1

9e8ce01f5c1fa7bf05efa392be3cff85a71d6c40
SHA256

22ae2430709f13002f0e7e8657d2342eafc38d1b0006b367908ba7cca3bedb2b
SHA512

5070a681a32fb9d5fe48386eb5182dbb7b3d40ac5dcafaad6021eca0d5dcf5c88dce6e45b7c20618643a21a4c1eb6e3adb154f24df93ae03d56031581788188c
SSDEEP

98304:dPRbyyxcg/LAvzHhQ8+wkWQUDSLsOWIqurQvkBo:dpb3TAvbdkUOWh2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

22ae2430709f13002f0e7e8657d2342eafc38d1b0006b367908ba7cca3bedb2b
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE