64fefd95bc2e9bcca81b4ce16c4fab7216d374a1e3f53acf901e4fd959602cfe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64fefd95bc2e9bcca81b4ce16c4fab7216d374a1e3f53acf901e4fd959602cfe
Size

146KB
MD5

ec9e8ba3a1a9030941a9a4d066487e3f
SHA1

954fdf9b6dbe1c91f6506356e190d9c9b38dae19
SHA256

64fefd95bc2e9bcca81b4ce16c4fab7216d374a1e3f53acf901e4fd959602cfe
SHA512

630275c92027af1467bc2f272d439ec042d0956ddd8fe7a2872225a3c3f9e6bbae8a187fd67f6109d31a2ba5031f6a945919f9381ebf9cfdaabdb4ec721d11f2
SSDEEP

3072:ouowIuNv25d665tcixRJsSaTHDjt6bsvVPVFvKDJkxs/CGr8RTvQrO:ouYuy6Af2SEDjtAs99FvK9Nvr8R0

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64fefd95bc2e9bcca81b4ce16c4fab7216d374a1e3f53acf901e4fd959602cfe

Files

64fefd95bc2e9bcca81b4ce16c4fab7216d374a1e3f53acf901e4fd959602cfe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE