bb47183d6861619ac999532e49e69de6923fc906f2ad3a0d2fe781b5b73f6b29[.]exe[.]zip

General

Target

bb47183d6861619ac999532e49e69de6923fc906f2ad3a0d2fe781b5b73f6b29.exe.zip
Size

187KB
MD5

4f0954d36cdf29425ec1425034a673dc
SHA1

76d8eaba7f930c903379b985415591ef42183d9e
SHA256

389c698a99f56c3604af31727fe5ee5baa1d2606e0985083d39ba172204f117d
SHA512

34b0e4631312ad10ce22a70c163321c84347b7436a4440ef86123f5a0f828dfe82c84a8fc932efaee3a1d0e955d6b5ec272bf67123f23dea1437497ce4d31901
SSDEEP

3072:H7xpT7JtuKrAHVzMGBAi69f8xjr9vPeb6UfS0Ti7ACSdMWsVxA:bxFV0K+2tf8zebO0T9dMWSA

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/bb47183d6861619ac999532e49e69de6923fc906f2ad3a0d2fe781b5b73f6b29.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bb47183d6861619ac999532e49e69de6923fc906f2ad3a0d2fe781b5b73f6b29.exe

bb47183d6861619ac999532e49e69de6923fc906f2ad3a0d2fe781b5b73f6b29.exe.zip
.zip

Password: infected
bb47183d6861619ac999532e49e69de6923fc906f2ad3a0d2fe781b5b73f6b29.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE