71861067b58a5ac8303a02501ac7e6962c048df074e407d8452726db7d994bcf[.]exe[.]zip

General

Target

71861067b58a5ac8303a02501ac7e6962c048df074e407d8452726db7d994bcf.exe.zip
Size

3.5MB
MD5

d39e9b81c53ef8fc309c55a063c0bafb
SHA1

bbae1cb734cc2526d22598eca183d5e77d0d94ce
SHA256

1bb5dedc1663007cca984a8c38edc0d3996dd73c99cd2e61d3a89821ecb6f21c
SHA512

7e8e00aef4c97a3319ca4981d1011574edf1658a1750b72f705fb76cf0806a924034f985b9c2210c7536fd0ff368bdc433f8394cddaa4df776f4dee3d628a948
SSDEEP

98304:07+dJgNLnAnfHd5X9ihiwpy+JaQhlI58oUbA:07q2NLnq9/HwUOTbA

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/71861067b58a5ac8303a02501ac7e6962c048df074e407d8452726db7d994bcf.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/71861067b58a5ac8303a02501ac7e6962c048df074e407d8452726db7d994bcf.exe

71861067b58a5ac8303a02501ac7e6962c048df074e407d8452726db7d994bcf.exe.zip
.zip

Password: infected
71861067b58a5ac8303a02501ac7e6962c048df074e407d8452726db7d994bcf.exe
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 11.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE