Adobe_Flash_Player_一剑全清_V4[.]exe | Triage

Sharing

General

Target

Adobe_Flash_Player_一剑全清_V4.exe
Size

1.8MB
MD5

fb6f16d2ff1b606ed063e685a09c324b
SHA1

4c13302fe6d4fbea358d84e98351edc460c1891a
SHA256

42eebae7c3a631b189e7cf4e837c4e2e29a00d1700ef3cb7a3171527d6116b65
SHA512

5bb2752881173bbccd7db5215b2e06c86ea10dd4b221fd0835265d46c07e9c3316e2e07b7b15b54a69fafe4b8e7017a7091c98b21a9d2225edd2c5069fbab791
SSDEEP

49152:fUdIWWd8LXbYYdm3UuGxZu74lDaW5zYhKDn4wRxa4VMoXZe2y:fUdJ8A9omPuUBNzwYMoJW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

Adobe_Flash_Player_一剑全清_V4.exe
.exe windows:5 windows x86 arch:x86

Code Sign

5a:dd:2e:1d:47:5b:59:9f:47:0c:6f:d6:42:bd:8d:eb
Certificate

Issuer

CN=Free

Not Before

15-01-2021 00:08

Not After

31-12-2039 23:59

Subject

CN=Free

0a:17:a2:5b:fe:3d:6f:4a:a0:79:bf:b3:71:12:b2:5e:ea:ed:37:bd:d4:63:a9:8b:7f:98:44:a3:bc:dc:c3:c6
Signer

Actual PE Digest

0a:17:a2:5b:fe:3d:6f:4a:a0:79:bf:b3:71:12:b2:5e:ea:ed:37:bd:d4:63:a9:8b:7f:98:44:a3:bc:dc:c3:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 644KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE