063446ba02382a3f4e4dddef6e61202cbcf785515724c039e2124dd0850cfca1 | Triage

Sharing

General

Target

063446ba02382a3f4e4dddef6e61202cbcf785515724c039e2124dd0850cfca1
Size

2.7MB
MD5

eae5537c79bc2bfc92114e8bc8011647
SHA1

38cda08a332d03fa4645d01eecd0484d60bd4dc5
SHA256

063446ba02382a3f4e4dddef6e61202cbcf785515724c039e2124dd0850cfca1
SHA512

0c084d1e0b7aa74c5241a6db07dc192694b38f80720a89ebfb5b7729499dae06778ce10ca3a5f69249068c31ca6e6f740b8f29a7ae5286c8aab599e28addbee4
SSDEEP

49152:Y+iK3qszepQiXYOOfxi7AOm4FbZJp3XkIJYzf0E3nFo:Ya5zeppIzfIaO9+j0E3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
063446ba02382a3f4e4dddef6e61202cbcf785515724c039e2124dd0850cfca1

Files

063446ba02382a3f4e4dddef6e61202cbcf785515724c039e2124dd0850cfca1
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE