cdfcdca5ee4ef7532e96c8ab8f4d46419accff31e5a4e466f238e992011f7b37 | Triage

Sharing

General

Target

cdfcdca5ee4ef7532e96c8ab8f4d46419accff31e5a4e466f238e992011f7b37
Size

4.3MB
MD5

dadf8f2b7d93b7ea01822ba094436e38
SHA1

b839db55a7a4a38e9df944de417c3d4fc77574b8
SHA256

cdfcdca5ee4ef7532e96c8ab8f4d46419accff31e5a4e466f238e992011f7b37
SHA512

7fdba645796def0ca9068fb2181dbb80a354132f6fee98be122303d27821eb7e14f758437384bf45db94b0d1074a17c91bb5af19204bff9d9e93ecb03ad5af85
SSDEEP

98304:B+96MkX2L7meG2K5HCUnxB7jynCn2m+gQhAi+18o4lGbdvRQH:BJMkX2L7wfiefnQOnQhAi+H4Yb

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdfcdca5ee4ef7532e96c8ab8f4d46419accff31e5a4e466f238e992011f7b37

Files

cdfcdca5ee4ef7532e96c8ab8f4d46419accff31e5a4e466f238e992011f7b37
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE