bf162cc10475cb2d9786eadddcfb477b5d78ac6eb2e7563071008507b5f3cb6a[.]zip[.]zip

Sharing

Target

bf162cc10475cb2d9786eadddcfb477b5d78ac6eb2e7563071008507b5f3cb6a.zip.zip
Size

281KB
MD5

ab60f3edd654bead9b8b300dc197cd48
SHA1

b10d1f399c16d80ce69f5d3edec5d2a4a30b9642
SHA256

1c970e7b171480b0126d03f6c22f203ed75b4acc47d09aea0b5c057256173257
SHA512

3d7e6279a7f85180b1bee2dce8cdf59b6d1b3470f477a1c98ad0ad47b9c03b964af80993df6b9cdee84c690328dee29080d69475c1657a1cd67a840c958dd18d
SSDEEP

6144:v1a8ji3cHVSCOZwuYDiE64SlRYFGXqTQmy7yeor:9liLCah87SlRwGXay2eC

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack002/Terminal1_9_b/Terminal.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Terminal1_9_b/Terminal.exe

bf162cc10475cb2d9786eadddcfb477b5d78ac6eb2e7563071008507b5f3cb6a.zip.zip
.zip

Password: infected
bf162cc10475cb2d9786eadddcfb477b5d78ac6eb2e7563071008507b5f3cb6a.zip
.zip
Terminal1_9_b/Terminal.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 568KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 278KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Terminal1_9_b/delayedsend.tsc
Terminal1_9_b/dmx_test2.tsc
Terminal1_9_b/graph.tsc
Terminal1_9_b/hexbin2.tsc
.js
Terminal1_9_b/macros.tmf
Terminal1_9_b/menu_choice.tsc
.js