2a82bf44e8b87c4fe642c681af76c84a3a0432b48b0e1482755d5f5faa4bb752[.]exe[.]zip

General

Target

2a82bf44e8b87c4fe642c681af76c84a3a0432b48b0e1482755d5f5faa4bb752.exe.zip
Size

36.0MB
MD5

77a1a2d6d818cc6062a310a2a3e619e1
SHA1

fa43a13467cccc70ad51d10c32c2acf43a796d94
SHA256

1cfc50d829f04abfaca792860d9003bc89168f8bd783eac286de573a0f6a3690
SHA512

130f38f684e2da4a30684e11df43d84ce012d5ab9fdf2678dafeafac6de8c48063ddf30e301d6bfc85ddaa75bd67da3e36b8527b438e6528e5ee6ab39e582595
SSDEEP

786432:f0AKZVV/2P80FTa9mYJ3M6lTUYNfgeo0F8WxXvmhJAs9:f2Vt2PtFqmY5X97fgCF8Wx/mh/9

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/2a82bf44e8b87c4fe642c681af76c84a3a0432b48b0e1482755d5f5faa4bb752.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2a82bf44e8b87c4fe642c681af76c84a3a0432b48b0e1482755d5f5faa4bb752.exe

2a82bf44e8b87c4fe642c681af76c84a3a0432b48b0e1482755d5f5faa4bb752.exe.zip
.zip

Password: infected
2a82bf44e8b87c4fe642c681af76c84a3a0432b48b0e1482755d5f5faa4bb752.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE