8ab562b28b5259cd16e841eaa3aa36836dfa404844a72e41ba9a386e3fcb0bc8[.]exe[.]zip

General

Target

8ab562b28b5259cd16e841eaa3aa36836dfa404844a72e41ba9a386e3fcb0bc8.exe.zip
Size

1.6MB
MD5

d130fea4a04691964da326ca57b0528b
SHA1

f675ef62c393535d355d037b246ed1cca7570b4f
SHA256

75ef31a823fd1c3c8131f3bb98919383e7cd12bc6990b4c4f310381ac780241c
SHA512

f4278624f28dca976c94bbb76166cec90c5e3ff1fe45bc5087c938c9196a7acfe82e939958cc413ff30bbaaf93d5002558499aba2a1ee352fd2a00976eeccdc5
SSDEEP

49152:15Yqv5rcSFBOwJjGbdVxYoRF3+BrbDiN8/y4j:1W+cS3JjGb9YWF38bmN6j

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/8ab562b28b5259cd16e841eaa3aa36836dfa404844a72e41ba9a386e3fcb0bc8.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8ab562b28b5259cd16e841eaa3aa36836dfa404844a72e41ba9a386e3fcb0bc8.exe

8ab562b28b5259cd16e841eaa3aa36836dfa404844a72e41ba9a386e3fcb0bc8.exe.zip
.zip

Password: infected
8ab562b28b5259cd16e841eaa3aa36836dfa404844a72e41ba9a386e3fcb0bc8.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 224KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE