start[.]exe | Triage™

General

Target
start.exe
Size 4.0MB
Sample220831-e7qezsaef7
SHA256 a54ac89930406913a3b0b3b8e3ef738135a9b7fa54b01578f870e26ee9f99efb
MD5 47b29465bb5fcbbd899f1d98af193f06
SHA1 ddd7c01b07939751f734c1e9b7aa17853447e02c
SHA512 838a170802283f318712195402dc26dc601d2f81d3dae1f32309e532af732808c1a8b03c80f7dcf99b2ae94276678bb4211a44ebe889335da34a6083c4bd31f8
SSDEEP 98304:556qNnHwRAd/G/dzWR6bn0RqGUvxf9g+9wZbgVA4GYaBD/zgEbSCxj:55XQN1zTreqGsxD5VtGYa1/
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

start.exe

.exe 4.0MB

start.exe

SHA256 a54ac89930406913a3b0b3b8e3ef738135a9b7fa54b01578f870e26ee9f99efb
MD5 47b29465bb5fcbbd899f1d98af193f06
SHA1 ddd7c01b07939751f734c1e9b7aa17853447e02c
SHA512 838a170802283f318712195402dc26dc601d2f81d3dae1f32309e532af732808c1a8b03c80f7dcf99b2ae94276678bb4211a44ebe889335da34a6083c4bd31f8
SSDEEP 98304:556qNnHwRAd/G/dzWR6bn0RqGUvxf9g+9wZbgVA4GYaBD/zgEbSCxj:55XQN1zTreqGsxD5VtGYa1/
MD5 SHA1 SHA512 SSDEEP

windows x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

14742704

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

start.exe