40dc213fe4551740e12cac575a9880753a9dacd510533f31bd7f635e743a7605[.]exe[.]zip

General

Target

40dc213fe4551740e12cac575a9880753a9dacd510533f31bd7f635e743a7605.exe.zip
Size

103KB
MD5

cf1884de20ed40f6f486bd24f73582f0
SHA1

64d7ab7e4560b725415d2a988a35a4e24c7eeeb5
SHA256

9c69e3db465a39d6b4b3ab4c06e81240eb863bbbbe8b33efb03a024a154fc363
SHA512

6c012b1c1ca33d7642f0164870dd70bb6318d65e2bdf49938d17298b29d8aed7f07c3c3be83e33287c1d0a56a84c7d06a2b945f0389219e831ba3bdc76a30c51
SSDEEP

1536:P2u52ROi9ComEHm5qh9lH/2bPVIOs5pQ2TA9fSuVqPUjbozY:Ou5ttBymS9lH/K3sbQ2puwPm

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/40dc213fe4551740e12cac575a9880753a9dacd510533f31bd7f635e743a7605.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/40dc213fe4551740e12cac575a9880753a9dacd510533f31bd7f635e743a7605.exe

40dc213fe4551740e12cac575a9880753a9dacd510533f31bd7f635e743a7605.exe.zip
.zip

Password: infected
40dc213fe4551740e12cac575a9880753a9dacd510533f31bd7f635e743a7605.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE