3b692a5e6afc3dd3467509d9969229ea84d5aa534afda59b3ccce98d034de7c0[.]exe[.]zip

General

Target

3b692a5e6afc3dd3467509d9969229ea84d5aa534afda59b3ccce98d034de7c0.exe.zip
Size

190KB
MD5

e714cee055544083bd17f29b8a4bc639
SHA1

7b067b6333a85c5c733960fcfa0263730e634c88
SHA256

50c6e61faef82de5b93b77d31d35964dd26fef45da6e4a5c97663512381a095b
SHA512

6471217fb7c4157d318b0b2057113e92a020b170c94d7dae14e77687290ef1279aff77d1672f8b28481ab9f2e01610156683eb41a189590ac689bf5292485db5
SSDEEP

3072:UW+0HEnoqMsvI7ga+2G3/FWdK7A1uHeFKmHvnS0ESrbw85nC72Nvqk+:UvvnJ1vI7J+BPcdE8uCVHvS0lXw8RCEk

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/3b692a5e6afc3dd3467509d9969229ea84d5aa534afda59b3ccce98d034de7c0.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3b692a5e6afc3dd3467509d9969229ea84d5aa534afda59b3ccce98d034de7c0.exe
unpack002/out.upx

3b692a5e6afc3dd3467509d9969229ea84d5aa534afda59b3ccce98d034de7c0.exe.zip
.zip

Password: infected
3b692a5e6afc3dd3467509d9969229ea84d5aa534afda59b3ccce98d034de7c0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Sections

UPX0
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 800B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ