da96996e2823d872abd0baeb40e5b1be9ca54b69ac576c8c07011ef3b8d10ce5[.]exe[.]zip

General

Target

da96996e2823d872abd0baeb40e5b1be9ca54b69ac576c8c07011ef3b8d10ce5.exe.zip
Size

130KB
MD5

2fae6514cfe3cfa4bbaab165a22dc1de
SHA1

a9f9398e7b7e3e5cbe813614e88b1d10a0a82dc6
SHA256

fde4fcfe2db227b82bd39bffb6a0235865eebef03e99e3f34d680a1bd3f8aba9
SHA512

0e3bc7a7d1f54cd9caed14d65200810e436ff62c9bfad9a5b7172b8c6c478fd6e4a1335c02f25e6f7532a921f69bc126f4fd98892f11044316a4768a6b20741b
SSDEEP

3072:C3v5nmfx/rrkMcsjIvYpKrijllchjP60IE0Twm53nAbDoylONhECd:uv1K/PkVMIvYp+ijll+O08Twm2bDo7Td

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/da96996e2823d872abd0baeb40e5b1be9ca54b69ac576c8c07011ef3b8d10ce5.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/da96996e2823d872abd0baeb40e5b1be9ca54b69ac576c8c07011ef3b8d10ce5.exe

da96996e2823d872abd0baeb40e5b1be9ca54b69ac576c8c07011ef3b8d10ce5.exe.zip
.zip

Password: infected
da96996e2823d872abd0baeb40e5b1be9ca54b69ac576c8c07011ef3b8d10ce5.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE