ed4ddbad4712eb0d2312369b521988514d3c23aabd767ba443b4858ecb769eea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed4ddbad4712eb0d2312369b521988514d3c23aabd767ba443b4858ecb769eea
Size

2.0MB
MD5

e1d8f032a7dddef4049c406c7125c0bc
SHA1

dc1aff9c2ab2d36312fbfed58d84890c94b77a79
SHA256

ed4ddbad4712eb0d2312369b521988514d3c23aabd767ba443b4858ecb769eea
SHA512

a250cb1ea9548c0c53d2be0ff4dcb8bf34e6415bed2dbf5394a2a12508f6cf7379d5f80b0802d91b6f19beedd64625b3bcfd91689c68158ff09044f3f1222b2d
SSDEEP

49152:6FG2jiOGhLUNWcfeMC/2gzvjRboFFO0cjp:uG2jijhwNgl/puU0

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed4ddbad4712eb0d2312369b521988514d3c23aabd767ba443b4858ecb769eea

Files

ed4ddbad4712eb0d2312369b521988514d3c23aabd767ba443b4858ecb769eea
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE