eb4f731195d8de7293353bdecccb876772cb6f3705f39436757ad45eb04feab8[.]exe[.]zip

General

Target

eb4f731195d8de7293353bdecccb876772cb6f3705f39436757ad45eb04feab8.exe.zip
Size

150KB
MD5

ac223ff0880fa596196df1f35a51c673
SHA1

e84ab42d8a2e98406abce82790c4e84c72a36705
SHA256

2144f8bb688647630631882e191eaf9d88ec24fd9f24b73ffbd198f5d6a0ae55
SHA512

0c366f969e0c150eabdf8c7f8a5cda300ec40e5a54c93be3a67f5ef50731a71b37a9bbe0d5070dbc8d391be989c9481010d6ed8c18e06467fb1cfa596e483bd8
SSDEEP

3072:Yq4I5R9+/AB4Iv8zgDG3uBoU2oVkc6ooTjt//hF2Nxhzn8aRp:YORi+QgD/BoU2oVkrf/FW8Cp

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/eb4f731195d8de7293353bdecccb876772cb6f3705f39436757ad45eb04feab8.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/eb4f731195d8de7293353bdecccb876772cb6f3705f39436757ad45eb04feab8.exe

eb4f731195d8de7293353bdecccb876772cb6f3705f39436757ad45eb04feab8.exe.zip
.zip

Password: infected
eb4f731195d8de7293353bdecccb876772cb6f3705f39436757ad45eb04feab8.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 364KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE