3aac811cea31d85addf591a79e59441373476238716c04e5cc20d1d7239f18cc | Triage

Sharing

General

Target

3aac811cea31d85addf591a79e59441373476238716c04e5cc20d1d7239f18cc
Size

4.3MB
MD5

7158d38ca5141701d75ca000a7501fd9
SHA1

cacf75237dd0190ddd4f80583fde6d3384c66300
SHA256

3aac811cea31d85addf591a79e59441373476238716c04e5cc20d1d7239f18cc
SHA512

a790583348f2449e8346e214fdef5fc31a2ed7f34db8bb550e448dd3ff71038f751e301e8cb9f2ce000adbaaf2d7d032e2ae82da2626d460c4dff4e6145ff7fe
SSDEEP

98304:OBF6+ogwEMfNV1HtUsmxSUF8CQQJk52nQiao5rig:UTYEiV1mLxSUVQanraOm

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3aac811cea31d85addf591a79e59441373476238716c04e5cc20d1d7239f18cc
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE