cae62608b41e2e9fb1a0d304ee6876c7cdc7c5b4030da70cd41bacec489554e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cae62608b41e2e9fb1a0d304ee6876c7cdc7c5b4030da70cd41bacec489554e1
Size

69KB
MD5

d286a30739448ff7357b6d5f17f71205
SHA1

962369543fc63cec26c22b58c5f6405123dc55b9
SHA256

cae62608b41e2e9fb1a0d304ee6876c7cdc7c5b4030da70cd41bacec489554e1
SHA512

d1c3ce353f99d4dd6176638ace999c3ce9861aa295608b283d14e070d0491f4ffb4a92f86213cd156a7ba29d68ee795db426b7d8f1bd781e3fd4069b3294cdaf
SSDEEP

1536:V7Zf/FAxTWoJJZENTNyQYnnzgLW45OTdRVfhp:fny1tEunzgVU/V5p

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cae62608b41e2e9fb1a0d304ee6876c7cdc7c5b4030da70cd41bacec489554e1

Files

cae62608b41e2e9fb1a0d304ee6876c7cdc7c5b4030da70cd41bacec489554e1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE