345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8[.]exe[.]zip

General

Target
345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8.exe.zip
Size 91.9MB
Sample231031-rf7w6she61
SHA256 e4d02c798b69040251893da62f63e8e46c71473368158766af6b90a268d5a957
MD5 f5d7e1c279aab7077db1ee452a37d34e
SHA1 5182e02ce9c807a69b4dea770f47b159688d2bd9
SHA512 8c3e8b1cab099342a6cab80d18148f6076b0b7e4c07d53b3eb29cdfb9cacf461c9c6c14b2c1e0b97d558adabda8a80cbabd73c95a20af6086419d71d8e30574b
SSDEEP 1572864:poUWzXQlBBLiUS29xoLah0/AUU42HkZ1D47saDCZYs4EluHsbQSs+rpLdrp1UIJ:pQzXQbBLDLoLas/qHkuza4EMHQBpLd9n
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8.exe

File Explorer

345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8.exe.zip

.zip 91.9MB
345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8.exe

.exe 92.1MB

345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8.exe.zip

SHA256 e4d02c798b69040251893da62f63e8e46c71473368158766af6b90a268d5a957
MD5 f5d7e1c279aab7077db1ee452a37d34e
SHA1 5182e02ce9c807a69b4dea770f47b159688d2bd9
SHA512 8c3e8b1cab099342a6cab80d18148f6076b0b7e4c07d53b3eb29cdfb9cacf461c9c6c14b2c1e0b97d558adabda8a80cbabd73c95a20af6086419d71d8e30574b
SSDEEP 1572864:poUWzXQlBBLiUS29xoLah0/AUU42HkZ1D47saDCZYs4EluHsbQSs+rpLdrp1UIJ:pQzXQbBLDLoLas/qHkuza4EMHQBpLd9n
MD5 SHA1 SHA512 SSDEEP

Password

infected

345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8.exe

SHA256 345c702c061d3e4240cd2a217f09a917909118f36f47b0db7c3d585be8d44cf8
MD5 6a588bb30f1306feab79a324bca2d11e
SHA1 09d16f90e8394dbbf83c136b0337d0b78d48b36b
SHA512 ba09d1bb8054587c87cf5b6b6c383f39ff2a5e0ea8ea512c7c3f056eb56c69e7721f59b76a22c6f6c8ad25bbf8aa678fcb89265291d5b0c1f2d30d4b826e918d
SSDEEP 1572864:eHETyWcuh1jARcO4dmiWXWyRv2m+Q/cwJbWywzVKb5qVfxICqIY2bHOeQwqdNi:mETyW/hFxiN3cwJbWyLEfxg0TQwUNi
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

430512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Sharing