958356b443893221363c3da1bf46b8fd3bec18c5740d8d233633741c2e008e32[.]exe[.]zip

General

Target

958356b443893221363c3da1bf46b8fd3bec18c5740d8d233633741c2e008e32.exe.zip
Size

2.2MB
MD5

1f390dd685b6a061f67745b86f52b91e
SHA1

ed4bcddcf84e881fafe53bc8b0b8432f7d3862dd
SHA256

1d911c323cb5dc7141c93eeb57f06c574c2daa7f8c56225c5421717645e057eb
SHA512

b89db0a133c828a493a68555942a40070d64a23fcc1803fb75ae04abd20fb2b8bee6bc3dd1789e30b023d8432a782f499c12bb0355e59e33975afff2d855c1c2
SSDEEP

49152:MEhS2zl5XQvBknD79pWFKNAbYoemYz4oq5vHQR9aGMRZiIFP5:owl5XqMDZpWFTblFoA0YGMCIFh

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/958356b443893221363c3da1bf46b8fd3bec18c5740d8d233633741c2e008e32.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/958356b443893221363c3da1bf46b8fd3bec18c5740d8d233633741c2e008e32.exe

958356b443893221363c3da1bf46b8fd3bec18c5740d8d233633741c2e008e32.exe.zip
.zip

Password: infected
958356b443893221363c3da1bf46b8fd3bec18c5740d8d233633741c2e008e32.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE