614ccc380536b90b5c256b6934747483544f80681a4b1f0a7b05962f0251e016[.]exe[.]zip

General

Target

614ccc380536b90b5c256b6934747483544f80681a4b1f0a7b05962f0251e016.exe.zip
Size

468KB
MD5

bdc16d58ba92ad70a30cfb1a666bfee6
SHA1

408da6aede924e84fe36a62a09f2f16dd256c8a8
SHA256

5d0b25ac008ff2cb8529e73a161f83c4d0426a88b6fdc727a4cedce81831c411
SHA512

a8156ab24de4aab040655c4aaf1124611f547e96cb4e1206a7f0559572997ea128c10a1019eb933f85c117bca7516f0c3b9a95f581915e5816997f65fa3ecd3c
SSDEEP

12288:VTnnT+1ymy+BzCEFyEuYPggS+0s3y4QiTfhcDkfOL9aNsJ:VTi1x1BuEFy0g+0s3RFhekmMI

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/614ccc380536b90b5c256b6934747483544f80681a4b1f0a7b05962f0251e016.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/614ccc380536b90b5c256b6934747483544f80681a4b1f0a7b05962f0251e016.exe

614ccc380536b90b5c256b6934747483544f80681a4b1f0a7b05962f0251e016.exe.zip
.zip

Password: infected
614ccc380536b90b5c256b6934747483544f80681a4b1f0a7b05962f0251e016.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE