710f7a11a881107be7791dc6f5d31657b4173421808d41e4027517aec30b1d67[.]exe[.]zip

General

Target

710f7a11a881107be7791dc6f5d31657b4173421808d41e4027517aec30b1d67.exe.zip
Size

3.5MB
MD5

19fe0e272d6c61231d207a11197ca9cd
SHA1

90dfc508b30b184fc9f5c70e59e93ce23b7a7aa6
SHA256

a47aacebe63b42577b7f962af05d3aab8ffa5f24df3994f49b3f8436bfa89700
SHA512

1cb8d219e490699277a66154fd797bb0b544bca7e8c9fa9ff9d41175c28aa5554ca44ef4443172239dace0572b59a57b6b02a51f196c1ab0b7a67475fac42cf1
SSDEEP

49152:lpcPAx3hjByVmd7Kr5jFqzsElki53fedRu/S1fSVhWUbgFPFiOcUJVKSoSX5D6ke:TiAN3y9rxFUsElbx/OqVXMJsS75D6ke

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/710f7a11a881107be7791dc6f5d31657b4173421808d41e4027517aec30b1d67.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/710f7a11a881107be7791dc6f5d31657b4173421808d41e4027517aec30b1d67.exe

710f7a11a881107be7791dc6f5d31657b4173421808d41e4027517aec30b1d67.exe.zip
.zip

Password: infected
710f7a11a881107be7791dc6f5d31657b4173421808d41e4027517aec30b1d67.exe
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 11.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE