6d54de757d541941328ac228dd62ca9bb9adad7fdc215215fae44a484072bc05[.]exe[.]zip

General

Target

6d54de757d541941328ac228dd62ca9bb9adad7fdc215215fae44a484072bc05.exe.zip
Size

477KB
MD5

58d4aedff3280dd778888225f0cf4db9
SHA1

aa8e7f91c44ecdc610f0e3004c8057989fe42732
SHA256

d550b12c8937e19a710fd87d9c3f737fbf548847c28ca2c202367f23d193a406
SHA512

635322794c66f2d78a7273fd11ecc38a6b821b7e30a9b822c9c6bf26d52889bea29ae7934d28de18eaef52fcf75dd1a4db34190d267790b5eab5e08143a3a3c2
SSDEEP

12288:PeA7780kzhILotxzy0Pcz3puBhdqs/CBtAcLwZa6dv:7ytILaBcz3ps/hcLwEwv

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/6d54de757d541941328ac228dd62ca9bb9adad7fdc215215fae44a484072bc05.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6d54de757d541941328ac228dd62ca9bb9adad7fdc215215fae44a484072bc05.exe

6d54de757d541941328ac228dd62ca9bb9adad7fdc215215fae44a484072bc05.exe.zip
.zip

Password: infected
6d54de757d541941328ac228dd62ca9bb9adad7fdc215215fae44a484072bc05.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 696KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 373KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE