a8da7ff04df67bee23cf3a5f3f6155b4e5c626a46256d93f87f5b5e4a73fca51[.]exe[.]zip

General

Target

a8da7ff04df67bee23cf3a5f3f6155b4e5c626a46256d93f87f5b5e4a73fca51.exe.zip
Size

1.4MB
MD5

e425858a1669a0b270d877b4c69d7670
SHA1

0987f6fa6b1ccb01ea7ee51de3a7a621709ff3ec
SHA256

158c05b824b8cced01a9db0a082f5e55211a1fc10e34e479f2f10b7f0b30f7f5
SHA512

0a23a9b76a97830a7db3263b88a2daf4e59cda7d73d4a5b87dde1b6ecb8f2467688780b8c9eb7b4a385deacab9a2474d05fb7c96d6f1ebeb8aa804be46dd0df2
SSDEEP

24576:RXzkHqGl2OKtfiEc6IN9katbaz0q/aCCPkREe6FA9Atq+HYDMEj83i6i2PGnokB2:RXzkHxHKtrlOe/TCxo+t5HYD32PPw4y+

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/a8da7ff04df67bee23cf3a5f3f6155b4e5c626a46256d93f87f5b5e4a73fca51.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a8da7ff04df67bee23cf3a5f3f6155b4e5c626a46256d93f87f5b5e4a73fca51.exe

a8da7ff04df67bee23cf3a5f3f6155b4e5c626a46256d93f87f5b5e4a73fca51.exe.zip
.zip

Password: infected
a8da7ff04df67bee23cf3a5f3f6155b4e5c626a46256d93f87f5b5e4a73fca51.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE