9e44441c7151fc7193b14cfc078c81d79a3077c3698eece351856df029772752[.]exe[.]zip

General

Target

9e44441c7151fc7193b14cfc078c81d79a3077c3698eece351856df029772752.exe.zip
Size

2.1MB
MD5

e07bdb753da334554df8d995fc0e9e96
SHA1

5226fc0fbbdca423030aa3954ba8da6f23b65524
SHA256

50bc791648862c00604daf72233914c73ef2517731931796f966166d1a306363
SHA512

bb58d234a99b2b756aaa523c2c7cc58cdf5a6bc025bad9a3d580d61d03bf69c989399ee6672108ce28c5000681a1dc55d3057fe9b81b463e2b30b0bdebf9adaa
SSDEEP

49152:HTX9uHaXancHJc1juswGzRim3zk45kTCxsPrmg8dWnWoMQk:HvMcH6uRGzRimA1Ks20k

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/9e44441c7151fc7193b14cfc078c81d79a3077c3698eece351856df029772752.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9e44441c7151fc7193b14cfc078c81d79a3077c3698eece351856df029772752.exe

9e44441c7151fc7193b14cfc078c81d79a3077c3698eece351856df029772752.exe.zip
.zip

Password: infected
9e44441c7151fc7193b14cfc078c81d79a3077c3698eece351856df029772752.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE