a14de096a0f17606411fafcfa6fc73c4d633e527aa36c65a8b9e6bbb301fac1a | Triage

Sharing

General

Target

a14de096a0f17606411fafcfa6fc73c4d633e527aa36c65a8b9e6bbb301fac1a
Size

6.6MB
MD5

3744113247c2ccf029081501d212e3a0
SHA1

b6309bed6b9e2cddaf547941222d1d93cae098f0
SHA256

a14de096a0f17606411fafcfa6fc73c4d633e527aa36c65a8b9e6bbb301fac1a
SHA512

a354a2899310ecec30037adeb415c40472f4f8dadfdfd3a74bead6709ce651ea418474fe14d901cf81180708996333a1e9082f9b689338f18f003342a55e3fcf
SSDEEP

196608:lk/jpwG0bTC85NDEYKg7wVPPJ7gEf49jHt9JKL:S/1B06wpEYZ7wPg1zJKL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a14de096a0f17606411fafcfa6fc73c4d633e527aa36c65a8b9e6bbb301fac1a

Files

a14de096a0f17606411fafcfa6fc73c4d633e527aa36c65a8b9e6bbb301fac1a
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 25.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE