cc5ffd46acf15a2026849a464ebed7996532321c30c3a5a96d7b583e830bf8b6[.]exe[.]zip

General

Target

cc5ffd46acf15a2026849a464ebed7996532321c30c3a5a96d7b583e830bf8b6.exe.zip
Size

11.5MB
MD5

220b87b9daf207f4805fd83255de0ea7
SHA1

cb4a219c9aa0392d02d2012e1338a5edf4e76963
SHA256

9d557150d2f8b08cf9b1746a2e3475d1039584d309932c5e041606de09654446
SHA512

22848053460bcd555d6f37f10662a717fed202a491ae25a9c425592b7270c77eff1844cd71c68d81db6df5b27b30ddcee31ed2a6ebed8898c48633ff5ac9b2f3
SSDEEP

196608:xamFucmjmUin6DacZhszxzhiw5SmtUDXK7ItaJ02P06QXjz4eU6o9RN995CgZ:M0ujKHmbstNiw52/25aA2cbLZ

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/cc5ffd46acf15a2026849a464ebed7996532321c30c3a5a96d7b583e830bf8b6.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cc5ffd46acf15a2026849a464ebed7996532321c30c3a5a96d7b583e830bf8b6.exe

cc5ffd46acf15a2026849a464ebed7996532321c30c3a5a96d7b583e830bf8b6.exe.zip
.zip

Password: infected
cc5ffd46acf15a2026849a464ebed7996532321c30c3a5a96d7b583e830bf8b6.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 35.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 11.6MB - Virtual size: 11.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE