189e1588268d51b7fb6e8633ec8f6ba82d5720979f14dbbfe59cac1b8be1b34b[.]exe[.]zip

General

Target

189e1588268d51b7fb6e8633ec8f6ba82d5720979f14dbbfe59cac1b8be1b34b.exe.zip
Size

192KB
MD5

76e0f99a4c231066f22939d8044e3028
SHA1

0acca437711993a807d5e1d14a9e18103cdcea99
SHA256

63f09accec72a4d5686cf07c6a935738b1d5a444aff58eb90463de7f6c768ce4
SHA512

15279a3cefcf7ca6e07cbd7020ad1ef49849c22b2a2533f80c3dd711f3a4b12c6506a2fef69ac2e8004e32602351e06a183f8548e418f48593e78271bcacffcb
SSDEEP

3072:QHF9SeP/c5++LzKktVuo1/3THohN2tYz+ra4xY6uD1c9+tuOOkQPSgrAyW/47+H3:U2+gzK6MhNB6p9qc9+ZJQqOW4BPWims0

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/189e1588268d51b7fb6e8633ec8f6ba82d5720979f14dbbfe59cac1b8be1b34b.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/189e1588268d51b7fb6e8633ec8f6ba82d5720979f14dbbfe59cac1b8be1b34b.exe

189e1588268d51b7fb6e8633ec8f6ba82d5720979f14dbbfe59cac1b8be1b34b.exe.zip
.zip

Password: infected
189e1588268d51b7fb6e8633ec8f6ba82d5720979f14dbbfe59cac1b8be1b34b.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 364KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 190KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE