B5AAE5935607C91AA80A08EAAB40BA7D6CBA7F69DA8419641C4F94A2807FCCD2 (1)[.]zip

General

Target

B5AAE5935607C91AA80A08EAAB40BA7D6CBA7F69DA8419641C4F94A2807FCCD2 (1).zip
Size

20KB
MD5

8d3b3b2d87da90637805273089430255
SHA1

f942e6ffe0afc21e2f80d4065000281d62894650
SHA256

0b9972f0af751cfe4de436f5949ed7648d5a30b4e88b79e8b8f3dd051120a582
SHA512

1a0227c7c2f7346d9b78be84e1a5261e16cab7ce7d74b7354e82a71cacef34257b977133ccc711c1f3b9873b80b37119643707517828dd92fe5b36fddfa02e03
SSDEEP

384:bBugeVmtjd9U7XOSVdb8uZeVzTbHmr8ktGZrt6soV4YhmiwQreoFFdpAWdh3vU7:bA7kqXJVt8RtTbH6Yy5PhjwyfpDhfU7

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/B5AAE5935607C91AA80A08EAAB40BA7D6CBA7F69DA8419641C4F94A2807FCCD2	upx

B5AAE5935607C91AA80A08EAAB40BA7D6CBA7F69DA8419641C4F94A2807FCCD2 (1).zip
.zip

Password: infected
B5AAE5935607C91AA80A08EAAB40BA7D6CBA7F69DA8419641C4F94A2807FCCD2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE