speed[.]exe | Triage

Sharing

General

Target

speed.exe
Size

7.2MB
MD5

550d4c4fc723beba62cafb93ffff6357
SHA1

4c9b51dbc01c69d4b8e2cef3d6a0b12f2824c254
SHA256

a203380c24f97ebad23887025511ffb650e12fd3a70027b541ad46f53827ab90
SHA512

c409e16112adc30d2a36f1fe9d36fc1ef4ed2473dd03c863a1cfc7fa4e0ce6f57fa16057db63df12fcdbb9a3fc5dca0caa4b36c7b1b70f1d6f6729ab092ad3b7
SSDEEP

196608:tyMyVQU42UWHtjXi9VYbXJ4ay6iuLPPO:4MyV62THtKyXeayYz2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

speed.exe

Files

speed.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 7.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE