19fcaeea89f855f189d368c42e60f2f1a46f33b2c47dd6ccb2b4623c89f61dd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19fcaeea89f855f189d368c42e60f2f1a46f33b2c47dd6ccb2b4623c89f61dd1
Size

9KB
MD5

83c68316a9cae5a381d88a6059285160
SHA1

67cc54b260be57405d58403fb794a24e74e2bc57
SHA256

19fcaeea89f855f189d368c42e60f2f1a46f33b2c47dd6ccb2b4623c89f61dd1
SHA512

d7f43665eb371cfd7fe34f43e37c4344e17f0d1a17e9790493a44cda8dcb73d17542f53055edcc1d6f18522ad4753e20cb01dcaefdf2d901745d413c2bb1a9a4
SSDEEP

96:nPf3kr+WSAYtYceAGrnCj70MiLlI9okvU7jFf0AgsEsjgBGNJM/Njb6ujZc+xXsB:nn3ZAMQ3Cj78uvejFf4FZMR/YxvnA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

19fcaeea89f855f189d368c42e60f2f1a46f33b2c47dd6ccb2b4623c89f61dd1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crkE
Size: 325B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE