5d5b7abe52d1c1bfea2c21456ea424545a567f3fe77fffcc49707526a7c08e45[.]exe[.]zip

General

Target

5d5b7abe52d1c1bfea2c21456ea424545a567f3fe77fffcc49707526a7c08e45.exe.zip
Size

247KB
MD5

db6f74127f7ebd313b2bc8fcb55898e3
SHA1

2d543bf2cff2cf8d5fd694ff4ccc5f3c4e6bff17
SHA256

b88e225a03855004c40aa2233c794c00d255facefc793474546ddf77079745f8
SHA512

6386c993b80ae2cde55b47cfe4b917bd839defbc89658bb462834ec0d5631d2636c25c67da69dcccf44c5a095e6450efc19ba1359f61f2df4d5672df2297185f
SSDEEP

6144:tfgSJZnWx2mZ7q9JcgHcy3KnPp7thlZAmJFfJGhwVGf75iV9qO:9gSjWxTZ+9RHH6nP9thlTnGhwOEDqO

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/5d5b7abe52d1c1bfea2c21456ea424545a567f3fe77fffcc49707526a7c08e45.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5d5b7abe52d1c1bfea2c21456ea424545a567f3fe77fffcc49707526a7c08e45.exe

5d5b7abe52d1c1bfea2c21456ea424545a567f3fe77fffcc49707526a7c08e45.exe.zip
.zip

Password: infected
5d5b7abe52d1c1bfea2c21456ea424545a567f3fe77fffcc49707526a7c08e45.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 217KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE