39876b82ef7b50b086c70346e6fcc9be0096ced3c6c7226babee11334c784322[.]exe[.]zip

General

Target

39876b82ef7b50b086c70346e6fcc9be0096ced3c6c7226babee11334c784322.exe.zip
Size

750KB
MD5

df2342e9e0e916e085aa2408d3d32de9
SHA1

cb43defddfcbd3aea14494a1f06868d4e6e6ba27
SHA256

ce3201cbe1096c1b11fe8f52d84253e1d340c2f350aedc6be0f51a031bab2f44
SHA512

8ef69729827cc03358b04b2f7f985691739e84673bd45fa414ed0e7605747434e2dc9abdf29662f6bcb35c124bd92b3137873ed67d8c9f19f5cc7db7a850fbe7
SSDEEP

12288:yZsyb0RJYBrZqEWuhhIfPevlRHNdkYGjcZ8l30LMO6o3PMgY+x1FlhURE:yuyQRJAhvXNdkYGjS6kLOAhtBjQE

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/39876b82ef7b50b086c70346e6fcc9be0096ced3c6c7226babee11334c784322.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/39876b82ef7b50b086c70346e6fcc9be0096ced3c6c7226babee11334c784322.exe

39876b82ef7b50b086c70346e6fcc9be0096ced3c6c7226babee11334c784322.exe.zip
.zip

Password: infected
39876b82ef7b50b086c70346e6fcc9be0096ced3c6c7226babee11334c784322.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 756KB - Virtual size: 760KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE