d4a8c86cf5ce87c41b6b3a729cfc4e41[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4a8c86cf5ce87c41b6b3a729cfc4e41.exe
Size

3.2MB
MD5

d4a8c86cf5ce87c41b6b3a729cfc4e41
SHA1

6226cf1895bda222ff4cfda5fab1a310586506d1
SHA256

d7558c94c93cd0da15df3b87aaa2ca8ecacf8f2ed0b6523e325e9ac118d1d768
SHA512

d98ddd1f4694302519c6686ff76428c797cd843d4a2b088f40209a28aa5d8ba8adbcf7cda3decb357cb5bb643d3b3682d6276606b76cdb55bc85d1a65fd9eeb5
SSDEEP

98304:gh9duV5KDkv1u8MtpVUYxNl+MhJyhc0i2m:uIVQDkv160ENT9X

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d4a8c86cf5ce87c41b6b3a729cfc4e41.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 37.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE