08bd6e34d5c97e18a0a7de473efeb0f847c24c2bf8f9a7f4f99d9690d807554a | Triage

Sharing

General

Target

08bd6e34d5c97e18a0a7de473efeb0f847c24c2bf8f9a7f4f99d9690d807554a
Size

4.3MB
MD5

ea952e0e2240ea9755510a3940b025d5
SHA1

b97b8f113b8d12492971e8a106bb3be682b1cbf1
SHA256

08bd6e34d5c97e18a0a7de473efeb0f847c24c2bf8f9a7f4f99d9690d807554a
SHA512

2749957d0ed6073b87f4eb0f62c5a19283a3b7a0e6f5593b118079a1e355c9c6089057b00684fbf1ebb4eb666d68e4fdd54f39aa511aedc123aa2557876bc369
SSDEEP

98304:kK7DH7Xegk+LXdD50BYbCio0GS2Q7Y78vwQcXsb0Vf2zfT/XvcJg/rNfeHygm:V7DH60Xd+SbCCYEAbQcxeT/XUJANng

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08bd6e34d5c97e18a0a7de473efeb0f847c24c2bf8f9a7f4f99d9690d807554a

Files

08bd6e34d5c97e18a0a7de473efeb0f847c24c2bf8f9a7f4f99d9690d807554a
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE