35774c7a85d175f6c1bf16842ae706ddbffc8755d5d09350ce4dac1c4020cac9[.]exe[.]zip

General

Target

35774c7a85d175f6c1bf16842ae706ddbffc8755d5d09350ce4dac1c4020cac9.exe.zip
Size

18.1MB
MD5

3c2565690132a1d39ac87a1728912224
SHA1

8fd6b8035e756b8e94c4aae39c7e5bf9a26de127
SHA256

9ed5bd17f28c9127166fb34517cd70958b6b62249e02bc0eab289030a009f4b9
SHA512

34950b40425f6a1669ce65b0d2f0d9ad28734d305bf79a90dc8d39b3b82662f3ca0052e456eb7f7428f79c0c422d8b33da3309322f79ee13b9b80e9d5b2c95b7
SSDEEP

393216:YdQepdy+jw3YT3DY+eeFbaJskgnQtQbTbjSAYtv7dX76YNYmD6c:Ydn72YbDHFbaJrgn6+TbmdXvYmD6c

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/35774c7a85d175f6c1bf16842ae706ddbffc8755d5d09350ce4dac1c4020cac9.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/35774c7a85d175f6c1bf16842ae706ddbffc8755d5d09350ce4dac1c4020cac9.exe

35774c7a85d175f6c1bf16842ae706ddbffc8755d5d09350ce4dac1c4020cac9.exe.zip
.zip

Password: infected
35774c7a85d175f6c1bf16842ae706ddbffc8755d5d09350ce4dac1c4020cac9.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 39.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18.3MB - Virtual size: 18.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 213KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE