baf481ef2e6897d7ac462dbab1a0c5f7[.]exe

General

Target
baf481ef2e6897d7ac462dbab1a0c5f7.exe
Size 1.2MB
Sample220309-spl7hacehq
SHA256 ebe588c49f9735f4efbed599b492410703a4a49ec347c6c54e0d0d8a6532dc83
MD5 baf481ef2e6897d7ac462dbab1a0c5f7
SHA1 39e2eb47062fa01ff57b93340040f5168a9f94c9
SHA512 bd43cb2200fa3a0f21bcf0c67cfc75db6144f494166faff6cc4a89b8daccac74716d8e0cf994d646bf0453dea0b2121e2a5ab6a8717f340971522e269e1fea4b
MD5 SHA1 SHA512

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

SHA256 ebe588c49f9735f4efbed599b492410703a4a49ec347c6c54e0d0d8a6532dc83
MD5 baf481ef2e6897d7ac462dbab1a0c5f7
SHA1 39e2eb47062fa01ff57b93340040f5168a9f94c9
SHA512 bd43cb2200fa3a0f21bcf0c67cfc75db6144f494166faff6cc4a89b8daccac74716d8e0cf994d646bf0453dea0b2121e2a5ab6a8717f340971522e269e1fea4b
MD5 SHA1 SHA512

windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

1860064

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths