057dbe1f60b6afd343c86b10fd71a9c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

057dbe1f60b6afd343c86b10fd71a9c2
Size

6.1MB
MD5

057dbe1f60b6afd343c86b10fd71a9c2
SHA1

3925beab6abfd3e9e5b2601594563dab47fc886e
SHA256

965b77196fe023bc24919741d08c91c999d33a4931a2b1e26869934f0023d74c
SHA512

df5d340ec7227b222d887f6785218e69693daff262bf30d7ff6fc580916903ccadd75b811bd6085f5fd28218b381e437cf63408cb2a3d1733822ef0a159438de
SSDEEP

196608:n6VEn1gOxTIsLUkhy10MedZ7BKkrhj0HpO:n6M1gOSsLUB094krmHo

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057dbe1f60b6afd343c86b10fd71a9c2

Files

057dbe1f60b6afd343c86b10fd71a9c2
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 17.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE