1aeb293c71e99db33206c141569b807491b9c8365f0f08f3bb6915d3fc519c8f[.]zip

General

Target

1aeb293c71e99db33206c141569b807491b9c8365f0f08f3bb6915d3fc519c8f.zip
Size

4.0MB
MD5

2edeffa048aaa5ea3e883438b82c718b
SHA1

a97623afd1898d8d531935ddb988cebbb7643325
SHA256

1aeb293c71e99db33206c141569b807491b9c8365f0f08f3bb6915d3fc519c8f
SHA512

c5e20ea4b37f449d0e52f996f3fa9cbbcabbbe510805739e5bc47021fbf7a7a5842d74ff88ee85bc4be45c453ea68b5e974b12b6c6521581282eea4eb8afb0fe
SSDEEP

98304:GNo8Vkzi55S//U0j5CWcSNScOOeT7KJpDrf/XpXE:UyzESX/DTM1QBr3XBE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/移动云招聘公示查看器.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/移动云招聘公示查看器.exe
unpack002/out.upx

Files

1aeb293c71e99db33206c141569b807491b9c8365f0f08f3bb6915d3fc519c8f.zip
.zip
__MACOSX/._移动云招聘公示查看器.exe
移动云招聘公示查看器.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 7.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 662KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 7.2MB

UPX1 Size: 4.0MB - Virtual size: 4.1MB

UPX2 Size: 512B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3.8MB - Virtual size: 3.8MB

.rdata Size: 6.7MB - Virtual size: 6.7MB

.data Size: 252KB - Virtual size: 662KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 80KB - Virtual size: 79KB

.symtab Size: 512B - Virtual size: 4B

UPX0
Size: - Virtual size: 7.2MB

UPX1
Size: 4.0MB - Virtual size: 4.1MB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 3.8MB - Virtual size: 3.8MB

.rdata
Size: 6.7MB - Virtual size: 6.7MB

.data
Size: 252KB - Virtual size: 662KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 80KB - Virtual size: 79KB

.symtab
Size: 512B - Virtual size: 4B