start[.]exe | Triage™

General

Target
start.exe
Size 4.3MB
Sample221025-lbxbzscbd7
SHA256 35ba668de0b81553c08865fa08b6d1dba20d36b7d284edf25d5f1b60f42f034b
MD5 2ee681cba9b74d82551836f316f3ffb5
SHA1 696eae32f54e5428fd73874d5d73659fc3447c1c
SHA512 6495c69060d376c77ab45893de8679ebd85e20561d5131ec8adb451825752ccc88105d9ea5646003cac2a81a58f036da78fee807d7f6c1a015441861db423ce6
SSDEEP 98304:ufAFEvCwU4nYTzlfgm/DvU3R5aLgaV8MF7Yrzf4DA1Q:ufGHuYTBfFvUREEaeMF7gw01Q
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

start.exe

.exe 4.3MB

start.exe

SHA256 35ba668de0b81553c08865fa08b6d1dba20d36b7d284edf25d5f1b60f42f034b
MD5 2ee681cba9b74d82551836f316f3ffb5
SHA1 696eae32f54e5428fd73874d5d73659fc3447c1c
SHA512 6495c69060d376c77ab45893de8679ebd85e20561d5131ec8adb451825752ccc88105d9ea5646003cac2a81a58f036da78fee807d7f6c1a015441861db423ce6
SSDEEP 98304:ufAFEvCwU4nYTzlfgm/DvU3R5aLgaV8MF7Yrzf4DA1Q:ufGHuYTBfFvUREEaeMF7gw01Q
MD5 SHA1 SHA512 SSDEEP

windows x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

14931280

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

start.exe