0e095735ba2333e4a05d21a7d640f06c92408ddbdefeb800e920f6f5d7f24fd0[.]zip

General

Target

0e095735ba2333e4a05d21a7d640f06c92408ddbdefeb800e920f6f5d7f24fd0.zip
Size

2.3MB
MD5

c592adc1730cdbf50e5993ba3efaa4fe
SHA1

de50636502181653d65b19bc5c986fc8600b6556
SHA256

32779f3dd1d1403ff6a7f5de262fbf51380731866612820eebfa898d67df9a5d
SHA512

58af019ac68e3e0c38611315b314129ef0ff550a518465a58aa87580b8fd5bfb6e8f8ed62f9dd7e397cd6c964d3f603472b29e684408101119615179c470434f
SSDEEP

49152:pekC2kjXp0/Lhuwp0vGQRuqcwdMuvH+xjIeYXoiZ3ILTJMQK40:pef2k90Vrf0uvwd7x4iZ4L+9

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/0e095735ba2333e4a05d21a7d640f06c92408ddbdefeb800e920f6f5d7f24fd0.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0e095735ba2333e4a05d21a7d640f06c92408ddbdefeb800e920f6f5d7f24fd0.exe

0e095735ba2333e4a05d21a7d640f06c92408ddbdefeb800e920f6f5d7f24fd0.zip
.zip

Password: infected
0e095735ba2333e4a05d21a7d640f06c92408ddbdefeb800e920f6f5d7f24fd0.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE