6fa78c23472a8eeac015dec629a7e54b858eb7e1c78a45ac4cd8b94f854fdf37[.]exe[.]zip

General

Target

6fa78c23472a8eeac015dec629a7e54b858eb7e1c78a45ac4cd8b94f854fdf37.exe.zip
Size

16.0MB
MD5

cf5bc56c05d7dc996cfaaabb71694ca9
SHA1

e24f95bec08d6919ee6be07dfacbf57a6d40e4b5
SHA256

5796a6ff1660e4a6c083c8fafedc943313c727b8bbb4c84ee8c39495c3670b44
SHA512

4bafb0f5e0663b6f92b65b8313497b3bbfc194c0700c965e40a38e78a0bb01a6727e677bc2b460e4d43c025f17cdf939ca41ac41d45234778e660942c5148b5e
SSDEEP

393216:jbVRA9kYm/7oinc5BSVBZSyJMgkDocBLzoGDM1S89JuxlFsowNgCavSJd6R:/A9kYQogc6ZbkDowDR89JuTF5iaaJd6R

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/6fa78c23472a8eeac015dec629a7e54b858eb7e1c78a45ac4cd8b94f854fdf37.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6fa78c23472a8eeac015dec629a7e54b858eb7e1c78a45ac4cd8b94f854fdf37.exe

6fa78c23472a8eeac015dec629a7e54b858eb7e1c78a45ac4cd8b94f854fdf37.exe.zip
.zip

Password: infected
6fa78c23472a8eeac015dec629a7e54b858eb7e1c78a45ac4cd8b94f854fdf37.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE