514[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

514.zip
Size

115KB
MD5

764acc48f3ac0b06dae2c1ec63c3e407
SHA1

6342168e7d2f8f9a57af21e69b853e32ec82a4ba
SHA256

0c8dabcbd564b42e81810aa3086190745dc5a1ec0b9b483c822cf4a96a983d22
SHA512

40b5c31faf59c9f68132ac2b374373b4c084703b42a50c22934a30b37161e6cf400e2cac8bddd21acfe1349f543937e33aea200770e9b44efeff428896079eba
SSDEEP

3072:vF1Ir6B6P13rug6IF1I5F1Iu6I96TF1Is6rJzkw0q3h6Vm:jIr6BGT6KI5Iu6S6vIs6rZkUx6s

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/514/4aeffe49823c55e6c7ece26c035b3e12c4dcbc662500b62df0d42b531ace7b11.bin	upx
static1/unpack001/514/b8de5b303a6e1cf6a22efeb2a2f60681cbdcb41b41dc1cf71397f0177c5b7bf2.bin	upx

Files

514.zip
.zip
514/098e077f1f426f996c6eda0099eb40dc0b16fe1a55c19a6802c71105979aa59c.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/12e1238416f9c3f2f58aebb37d624bf362e0a280814cd1bfb8fe80f01f89ca5e.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/2d3d48defceb6043309a32b23a8d8f7cea41f1602ed580d1f276e67b0afb4620.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/30bc60cc3ef5ad586794ebc7a9f495487fc22470424305ebdacb2f6d012580a7.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/3235c141520d0cf059fc1dcca9e6c898ee73c73d7ba783ccc574a149388289f2.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/4aeffe49823c55e6c7ece26c035b3e12c4dcbc662500b62df0d42b531ace7b11.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/61beec20d89f0be2818916c1c7715b0d4ac70450881b45e13e366f917dee1ba6.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/69ae17a89f484b97e25d1fb9cbcb356ec97125c49ee7ffe8c73db8eb738acf53.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/77dc5db8a6d5e4f269cf6194be73c8527fdf99c3e228effe69e45dc96a4a96fc.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/899b80ee0d22653df4bdc60c5caf9f2244502b14b2352221c01c6defbbd1e20c.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/9642319a738038fe57f7665d537fca94d81459c8e0347dd9e31e53e483db0814.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/9d40883aa653bac39c3ba5ec10a9ef118398e6a411828d13ea7ef2e9c30aa930.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/afdbfaccccdb5a1fa125974c013503dec166cae652ea0680bd63191522c1bfbd.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/b8de5b303a6e1cf6a22efeb2a2f60681cbdcb41b41dc1cf71397f0177c5b7bf2.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/dc6dc4667f3b12bc4ce1eeef5f39e6cfc2b4097cd0dae90f806769810b5654be.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
514/eb5b881e28d7c077be0db5cc8ceed305814a7814e52032d873dc615d52cb225c.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rsrc
Size: 6KB - Virtual size: 32KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

coderpub
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 16KB

UPX1 Size: 2KB - Virtual size: 4KB

UPX2 Size: 512B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 6KB - Virtual size: 32KB

coderpub Size: 2KB - Virtual size: 3KB

Headers

DLL Characteristics

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

UPX0
Size: - Virtual size: 16KB

UPX1
Size: 2KB - Virtual size: 4KB

UPX2
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

UPX0
Size: - Virtual size: 16KB

UPX1
Size: 2KB - Virtual size: 4KB

UPX2
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 6KB - Virtual size: 32KB

coderpub
Size: 2KB - Virtual size: 3KB