82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057 | Triage

Sharing

General

Target

82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057
Size

13.3MB
MD5

9290cdfd556ba52252ae3ade5fdbe5ea
SHA1

4f9f60d82465eea4e0941e190a2217d1f82e3f8b
SHA256

82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057
SHA512

4f4fb732c9d22ad0bad91a9f2b4ceb26360c3a8a3cc402928e6c13c266deca0f4003c5ba70951b953e46d07768a660ae19bb38c18613115b8b5781f32b70a88a
SSDEEP

196608:SEZ+85OKrBzHfuDdunOB/i04ofjU9Xd7P6CVYcrf5m/fLuW8yW4aGm/FOCEn4ROy:nk85cfnbnCVHILezjBgC80OfZTtnH

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057

Files

82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 34.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 179KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE