b449acf7961f8c59abe5f32d3f5ce65de2b7ae9e36263ecb0896340d7e8e2b3b[.]exe[.]zip

General

Target

b449acf7961f8c59abe5f32d3f5ce65de2b7ae9e36263ecb0896340d7e8e2b3b.exe.zip
Size

47KB
MD5

f0099059f819d75273afc086c19d1888
SHA1

055e3f18c25e15b69d84f666441ae1c14fdaeaf2
SHA256

54852a81d23e53ab3b6138549aefcdf66366397bd01643f02a4ae2213f41b00c
SHA512

9aaa347f7280e0cf1aa3ebeeff54e7c1ac0a82f8090bb99dad8e49c42cb1ace3311943110b449e566e1b345a53662e356c1691dc64444d4acaac5bf468096878
SSDEEP

768:Eo+M9GcIgJJ6CIJGlSKIuljRjmrDKJYtNq+7E+1VndKu2tIaHPWN56krLgJtl6+7:7+M9GczJJy+hRUeJYtNq+7E+0uIRHkrE

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/b449acf7961f8c59abe5f32d3f5ce65de2b7ae9e36263ecb0896340d7e8e2b3b.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b449acf7961f8c59abe5f32d3f5ce65de2b7ae9e36263ecb0896340d7e8e2b3b.exe

b449acf7961f8c59abe5f32d3f5ce65de2b7ae9e36263ecb0896340d7e8e2b3b.exe.zip
.zip

Password: infected
b449acf7961f8c59abe5f32d3f5ce65de2b7ae9e36263ecb0896340d7e8e2b3b.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE