Video Tankstellenschaden NG 12[.]06[.]2023[.]exe | Triage

Sharing

General

Target

Video Tankstellenschaden NG 12.06.2023.exe
Size

52.1MB
MD5

0629d9b9f04cb2471675aec0f62c9fec
SHA1

c34841c565be006d85ec54bf1d023ed5fd4eb608
SHA256

1d2d27bf22fb253feb9ac851093ce68b40375bd1d9c1f1018bf81fa774e06165
SHA512

e16ca39fb8a15a5cdfb063bc80930128c82a20c099b29f3890eb2268aacad00d7b5c407502757fc00bcc606b76dbcc1612e93b3d8314177125206db2c8c47f75
SSDEEP

1572864:BwnDRfAPAmmRZd+PTzck4QSvkDE1kBYy8MXDJZL:BwlSA9kHck4QSvkDE62ydDJZL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
Video Tankstellenschaden NG 12.06.2023.exe
unpack001/out.upx

Files

Video Tankstellenschaden NG 12.06.2023.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ