aa296433e513ea6e3ab63bfe144ca51e5afffd88a8831bcd1a913ab98a7abcd3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa296433e513ea6e3ab63bfe144ca51e5afffd88a8831bcd1a913ab98a7abcd3
Size

4.3MB
MD5

552850fd26af96c51c1117a723df0f5d
SHA1

54e1aab42b0ce68f364275128fa5069776730c04
SHA256

aa296433e513ea6e3ab63bfe144ca51e5afffd88a8831bcd1a913ab98a7abcd3
SHA512

ffe559fb3732c348452d6332c3018a660511c6f04515ca3e4c0e9edc71a1f393dcf5e31222f876b3fab78afe57b5686e97c72b8f449a6dad7fc05176950fc9cd
SSDEEP

98304:pl2pi4eZ0Kpm2fRkVBLaULnGRtCTJ2Nt1L5LZun6POraQlFemSLpA:pIh1KpVpk7LaUL+CTQ/1Lpc6PO5A

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa296433e513ea6e3ab63bfe144ca51e5afffd88a8831bcd1a913ab98a7abcd3

Files

aa296433e513ea6e3ab63bfe144ca51e5afffd88a8831bcd1a913ab98a7abcd3
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 10.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE