fd13d395259711446df64e04bda113ad75d999063ce149112583c5be271215d8

General

Target

fd13d395259711446df64e04bda113ad75d999063ce149112583c5be271215d8
Size

5.0MB
MD5

baedac6aab4e33950cf823878c3dff24
SHA1

f42a6dd506fded4f49b2954fc8f1e182ff21a640
SHA256

fd13d395259711446df64e04bda113ad75d999063ce149112583c5be271215d8
SHA512

eb8ff94b26eac827640d364a3015e09b56714c7ecc406662ed00d160c92f8f1959475fee97e88045a165c043d51bbd9b28d29d78fdeeecf6a7698b8e7b60791d
SSDEEP

98304:+xoxyOrWft7uu6QqZ+AoeMCDv7meogAWwOBnFTGvH84jeOYPIhgOQvETS:zyOru7d6QqZH5T7meoXW9rsnxgTETS

Score

7^/10

qr link upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Windows超级管理器9.45_Single/Windows超级管理器9.45_Single.exe	upx

One or more HTTP URLs in qr code identified
Detects presence of HTTP links in QR codes.
qr link

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Windows超级管理器9.45_Single/Windows超级管理器9.45_Single.exe

fd13d395259711446df64e04bda113ad75d999063ce149112583c5be271215d8
.zip
Windows超级管理器9.45_Single/Windows超级管理器9.45_Single.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 15.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 426KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Windows超级管理器9.45_Single/关注微信 - 更多福利.png
.png
- http://weixin.qq.com/r/wii4oJjEU8UsrdzD933Q
Windows超级管理器9.45_Single/果核剥壳 - 全网更新最快.url
.url