a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599[.]exe[.]zip

General

Target

a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599.exe.zip
Size

385KB
MD5

7a3f8fecfcdc66ac7f9e197e00cfff07
SHA1

b4dcffe4113d0a66a073b9e90e6e7c6d6f75d275
SHA256

270358cb765a0365c4b80fc98914e54db7c4c9ca9420ee9bdd51c4056e16569a
SHA512

ae458bc04f3831f0f69f11116fd92fee27232a1de9089c25521143fed2d1c28130e0dffbe609c6808269276a6c84168962e592e2b8015a993dd055e4292232b0
SSDEEP

6144:KYv8RHPZnKiDJhipHm0kL4UAyVeG+6oSfxNqAI5ol5OABBi8sU5ic:K0YHBnr9olABDmOJoA2c5OsB1

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599.exe

a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599.exe.zip
.zip

Password: infected
a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 390KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE