1a88d3716247810277d79b46982d8b38 | Triage

Sharing

General

Target

1a88d3716247810277d79b46982d8b38
Size

6.1MB
MD5

1a88d3716247810277d79b46982d8b38
SHA1

a9310b5bd718a04b03559382224e502ac0c1c364
SHA256

5a107a7d0c9d5e3cb3143dcd229c8902d40d141187293b28b1161c8c8551bfa8
SHA512

d65643f97993217f67d22ed66fc01a4133218b9f70a16d97894421832ef6dd9f4939fb06aadcc14c28163bfb30e781e093e845cf214906e15c753c323ac793c1
SSDEEP

98304:KHRnQCAj0NH5SyWOCer7IC8wWPFor1x20WNnGqM2WDH7sqrgoXf9MSaDBNBG:KHRQbI4FZaWkk0WNnGqa7sdgMSU

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a88d3716247810277d79b46982d8b38

Files

1a88d3716247810277d79b46982d8b38
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 17.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE