1790384eaa38f792b0d98f8a13e4666d

General

Target
1790384eaa38f792b0d98f8a13e4666d
Size 420KB
Sample231225-mmhhmsgbh9
SHA256 2815ade77c86bb66d3a085a83d50835cb4881ed1a12d772d2e09be55cab6c8b2
MD5 1790384eaa38f792b0d98f8a13e4666d
SHA1 f0809e0de20c767e988138b0004318ebf923eb92
SHA512 a100c2180589a172fb30a38963f827270672e784b9e72183438f009a3ce01fbe537055a3e35f91329d7243388d6eb454a17b61d9493ac3ccf4cd39c3b0cb717c
SSDEEP 12288:mwaA3t7VPRw+8cOSQN2jyGFyFjISvfsJJa/oSdF:Zpbw+8cze/jL4U7F
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

File Explorer

1790384eaa38f792b0d98f8a13e4666d

.exe 420KB

1790384eaa38f792b0d98f8a13e4666d

SHA256 2815ade77c86bb66d3a085a83d50835cb4881ed1a12d772d2e09be55cab6c8b2
MD5 1790384eaa38f792b0d98f8a13e4666d
SHA1 f0809e0de20c767e988138b0004318ebf923eb92
SHA512 a100c2180589a172fb30a38963f827270672e784b9e72183438f009a3ce01fbe537055a3e35f91329d7243388d6eb454a17b61d9493ac3ccf4cd39c3b0cb717c
SSDEEP 12288:mwaA3t7VPRw+8cOSQN2jyGFyFjISvfsJJa/oSdF:Zpbw+8cze/jL4U7F
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=ProNord GmbH & Co. KG,O=ProNord GmbH & Co. KG,POSTALCODE=24941,STREET=Graf-Zeppelin-Str. 20,L=Flensburg,ST=Schleswig-Holstein,C=DE

Serial Number

d3:77:53:96:a1:5f:34:41:6d:06:cd:c6:f5:ae:b7:60

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2011 - Apr 10, 2012

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Serial Number

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Jul 9, 1999 - Jul 9, 2019

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Minor OS version

0

Major OS version

4

Entry point

2073136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

1790384eaa38f792b0d98f8a13e4666d

PE Signature issue

generic