good[.]bin[.]zip | Triage™

General

Target
good.bin.zip
Size 118KB
Sample220423-grslhsaff8
SHA256 96e4a33925c4917776179db1ea0e432c8a790fac52c4a2014066fea0bde0edc0
MD5 c1e090c9ff7767409abf390774235328
SHA1 c81d1b1c6b71f2d397d8bc6637526f318e3fd753
SHA512 6119df0e346ef3cab2cfc61e6982fc1d6715830d06c0d5b02333125cae6757a464a24d93b2044a8088bba0df3141c78d9c1434e39f01387bad27656c7edd6926
SSDEEP 3072:kWt7NgeTYWY9RtvUQXl853DkMPxP0ss42z8vZvt+++FIrTehwrDL:ld6eTdeRtv/XOxkMJPD4YxvtSImWrDL
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/good.bin	upx

File Explorer

good.bin.zip

.zip 118KB
good.bin

.exe 143KB
out.upx

.exe 266KB

good.bin.zip

SHA256 96e4a33925c4917776179db1ea0e432c8a790fac52c4a2014066fea0bde0edc0
MD5 c1e090c9ff7767409abf390774235328
SHA1 c81d1b1c6b71f2d397d8bc6637526f318e3fd753
SHA512 6119df0e346ef3cab2cfc61e6982fc1d6715830d06c0d5b02333125cae6757a464a24d93b2044a8088bba0df3141c78d9c1434e39f01387bad27656c7edd6926
SSDEEP 3072:kWt7NgeTYWY9RtvUQXl853DkMPxP0ss42z8vZvt+++FIrTehwrDL:ld6eTdeRtv/XOxkMJPD4YxvtSImWrDL
MD5 SHA1 SHA512 SSDEEP

Password

infected

good.bin

SHA256 90d3580e187b631a9150bbb4a640b84c6fa990437febdc42f687cc7b3ce1deac
MD5 b034e2a7cd76b757b7c62ce514b378b4
SHA1 27d15f36cb5e3338a19a7f6441ece58439f830f2
SHA512 1cea6503cf244e1efb6ef68994a723f549126fc89ef8a38c76cdcc050d2a4524e96402591d1d150d927a12dcac81084a8275a929cf6e5933fdf62502c9c84385
SSDEEP 3072:VMb/kbqjO/3FxV8l8wiEXHPV9r99rWhzAxH7wpjv4z:VMxo3Z8BvV9rL6h2H7wJ4
MD5 SHA1 SHA512 SSDEEP

windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

42852240

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 7f12d8502c88112a227dd460e61a24f5c363f4bb8fec0f72ed432ead21842fb6
MD5 d501947d4aa37f0b20d0280027f88d7a
SHA1 d4d0e6c07e2d0148b7ae9894470b6a861670bcc4
SHA512 0540d023841600687769c998f268f14c058e30e97224cec05de1a9942a55d2fa71697e80e55511e4be7d65154a8ddd103058dcca6f80b6e53f505d0acf3269aa
SSDEEP 6144:kQq1GtUiiCWWipL2LNC1PL94LuAhLR94:k6WbpCLNaP54R3
MD5 SHA1 SHA512 SSDEEP