24c0c2d11f43cde4e63b6f4efdcf9b6261a4e4b4efe912d2ca39f9cea03973f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24c0c2d11f43cde4e63b6f4efdcf9b6261a4e4b4efe912d2ca39f9cea03973f9
Size

7.1MB
MD5

15ad3b08b9b3e27873bb7c87739283a2
SHA1

05260f1558eb99759bb69f46f07fc514f7ab9304
SHA256

24c0c2d11f43cde4e63b6f4efdcf9b6261a4e4b4efe912d2ca39f9cea03973f9
SHA512

d3b6047a8d972ba5c78aa5a4fccef59e9d9be20fcede402710413e1b3983e79ce7783bdcb6c69558dfd766dd3a642414ef2fc93b62840a2542480b11b9c6d4b8
SSDEEP

98304:f2hFA3W8bEmPIv2A0YjIHklcXXmQCf0ZapiorM47luAuEuM5rbMLEFb/OZ50CF1J:f2r78r22/ZLPwIapiJqnuM5rQib/+GCZ

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c0c2d11f43cde4e63b6f4efdcf9b6261a4e4b4efe912d2ca39f9cea03973f9

Files

24c0c2d11f43cde4e63b6f4efdcf9b6261a4e4b4efe912d2ca39f9cea03973f9
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 19.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ