c49bf5855036454491b2a8c4cc14f6106c57fe0110c5b3ab8050a63d357736f1 | Triage

Sharing

General

Target

c49bf5855036454491b2a8c4cc14f6106c57fe0110c5b3ab8050a63d357736f1
Size

4.3MB
MD5

12684d7c96562f82c4b4399e00c73fc6
SHA1

24a81b61c06331037613f48ead526d2d71a11290
SHA256

c49bf5855036454491b2a8c4cc14f6106c57fe0110c5b3ab8050a63d357736f1
SHA512

483410aa04a9d0989950b0276ab5c348d3b5543604d1fb8f0c582ae113e3d238cdff5e9f442ad4dad23608b02ed809081540c57ad7838435a62148ea8b4761fc
SSDEEP

98304:FsLPybBTNi6RPZfW1C/yovCUhGpFcYdYPKCdMwo0gsJAE8dAX9:wybBTNi6RPJWg/yovCUhbYePPpgsJ2y

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c49bf5855036454491b2a8c4cc14f6106c57fe0110c5b3ab8050a63d357736f1

Files

c49bf5855036454491b2a8c4cc14f6106c57fe0110c5b3ab8050a63d357736f1
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE