5b528202dac53e54516c0ef873a0d4dc561378830342c03d419f9841e376811b[.]exe[.]zip

General

Target

5b528202dac53e54516c0ef873a0d4dc561378830342c03d419f9841e376811b.exe.zip
Size

8.1MB
MD5

4cc1cf45be76f7e541c44c3b20235a0d
SHA1

f0b825695d4712da118117e04fb429b42306388a
SHA256

909cdab06b40fa339eb97ae1981198a8bbe28b3419123964feaa3ffab2b2f9a6
SHA512

812309bf6e585b9dd07a7b15e27f95adf3be81e6f67f0a630a2987fc7100b7cea703825cb167e097828d078a3b21f9a73ce3d7048b49736ce376aafef1110d3b
SSDEEP

196608:Cbnm4yWej4olgZkwW+Ih/JDSR2NplyzSa+JgE:Cz1Xt3/IjYKOE

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/5b528202dac53e54516c0ef873a0d4dc561378830342c03d419f9841e376811b.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5b528202dac53e54516c0ef873a0d4dc561378830342c03d419f9841e376811b.exe

5b528202dac53e54516c0ef873a0d4dc561378830342c03d419f9841e376811b.exe.zip
.zip

Password: infected
5b528202dac53e54516c0ef873a0d4dc561378830342c03d419f9841e376811b.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 11.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE