b2e663318fea63678a3b49569f7ce6e15f0cb17d25c47e3de37bd4217ccb04ac[.]exe[.]zip

General

Target

b2e663318fea63678a3b49569f7ce6e15f0cb17d25c47e3de37bd4217ccb04ac.exe.zip
Size

2.4MB
MD5

89cefd4f266a9d77b250baedb052af9e
SHA1

c734aee939d402b3389b6f05f13bff7d72e6d93f
SHA256

0877450c9d215ebc0f0a3e2367461fdca5031eb67bd91e81891e9a6ebcb4d69c
SHA512

005fc52a08c94242828c3768bf52a3b6720b4dfcebf8f8b5ae507ef69e333dfc98d07608513f7b9548fdbd75d403e3e25a1a6b31b9ac916ba621f75f03456f05
SSDEEP

49152:+Cmk27/umf5QvNx2J4Dce5NPidFV8giu7WlvMgjJLq6cQGLpFfbSU4N:hB2rGNxo4h5NO73QvnjpGdoU4N

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/b2e663318fea63678a3b49569f7ce6e15f0cb17d25c47e3de37bd4217ccb04ac.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b2e663318fea63678a3b49569f7ce6e15f0cb17d25c47e3de37bd4217ccb04ac.exe

b2e663318fea63678a3b49569f7ce6e15f0cb17d25c47e3de37bd4217ccb04ac.exe.zip
.zip

Password: infected
b2e663318fea63678a3b49569f7ce6e15f0cb17d25c47e3de37bd4217ccb04ac.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 7.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE