1026fa1534568b9b1b6a49a7695f2c6f802138fa27d7f0f9313b318371fc434e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1026fa1534568b9b1b6a49a7695f2c6f802138fa27d7f0f9313b318371fc434e
Size

1.8MB
MD5

4d2d194e399ce030ccb81a81229ff844
SHA1

56403237dca1dc4be1c835e41b91bf6c86e1f7a5
SHA256

1026fa1534568b9b1b6a49a7695f2c6f802138fa27d7f0f9313b318371fc434e
SHA512

9e4f6793169b9fb64a9dc1a222cb646ca6ad0453e12da1b6af7bd406d3c38836fc805c06bf7731af4b7931a4e0f543a3a40d308dbb7dbcce997f8fdd67023249
SSDEEP

49152:IqCB2WZ7/STChJkamgM5SBS5yVlMMo+iVsr0:IqCBlZzSOJkamgM5SBlpiVQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1026fa1534568b9b1b6a49a7695f2c6f802138fa27d7f0f9313b318371fc434e

Files

1026fa1534568b9b1b6a49a7695f2c6f802138fa27d7f0f9313b318371fc434e
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE