19ea078acefaf8ae1f18e66b276ae850N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19ea078acefaf8ae1f18e66b276ae850N.exe
Size

37KB
MD5

19ea078acefaf8ae1f18e66b276ae850
SHA1

aeff9cef0e86ffb739d7a6df0d1b8a45919f5ec1
SHA256

b97645373c1eb5b8e85bda0aea8c99835ab4a16de372123b0ecda7020ae2e9e6
SHA512

e29b6722889594867583ec47ee3f1d96140e352c0e216880f33ada001159a5308fc9453fd54e6078ddabdb2bb14d1b6ef6de9c0e7b38e481b1d4e424e6ad873f
SSDEEP

384:Oj/3On5QCMUWTSjuTB3tHER4RWaDW7R2tx7PdR3wqIKl6LaNniIguzBjgWd:Ojf3XB9JwL7RCZRAanrguL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
19ea078acefaf8ae1f18e66b276ae850N.exe
unpack001/out.upx

Files

19ea078acefaf8ae1f18e66b276ae850N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ