eef39416246446da8684c092ed5d4d9fcda5f55f690a638f62196dbf18c51aa5[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

eef39416246446da8684c092ed5d4d9fcda5f55f690a638f62196dbf18c51aa5.exe
Size

581KB
MD5

66c5df3f2f19ce77bdeb31bba7de7139
SHA1

b17851297a70359c6d5c3b33cafa1f308be263dd
SHA256

eef39416246446da8684c092ed5d4d9fcda5f55f690a638f62196dbf18c51aa5
SHA512

1097b7bc88f7511385cfa081b8e893ed261cf859c1c65aca32405b28d8c6e887a9e37ba9ee74cac8f986b6522c5754222b8763143b9d88653153fa20563bb111
SSDEEP

12288:ggx6pwnS3Px5A1vLnviFHl4oJuHwUK5vVDqrmdsqQRWgQ:RTSg1vLv86XHdyVDZdspR

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

eef39416246446da8684c092ed5d4d9fcda5f55f690a638f62196dbf18c51aa5.exe
.exe windows:6 windows x64 arch:x64

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e
Signer

Actual PE Digest

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 844KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 531KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7eSigner

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 844KB

UPX1 Size: 531KB - Virtual size: 532KB

UPX2 Size: 1KB - Virtual size: 4KB

.rsrc Size: 37KB - Virtual size: 37KB

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fb:cd:68:03:86:57:69:9b:22:ca:0a:ce:de:52:47:fd:57:d8:6d:4c:6b:14:d1:7f:f9:dc:cc:57:b9:f1:1b:7e
Signer

UPX0
Size: - Virtual size: 844KB

UPX1
Size: 531KB - Virtual size: 532KB

UPX2
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 37KB - Virtual size: 37KB