4a6af68adec57b4926db881f170b0f89

General

Target
4a6af68adec57b4926db881f170b0f89
Size 1.8MB
Sample240108-ew3aeaahem
SHA256 ddc5cd7b540c88f00bd8d685e4d4fce54b6223757d66599d02c22c718fa17ccd
MD5 4a6af68adec57b4926db881f170b0f89
SHA1 01970b9e2b23a4498cba226b8525428589677de6
SHA512 13ed2cd58376c9f1ac5a575c87db348bf674eb821e18aef50042c8ea28314dff0ed7afbe0c90ec37790643d79b929f503466ab30f434c0fdcfe2cd5ea2189078
SSDEEP 24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHO:SCqm2Jpr0nNM7Dus7Nx2u
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6af68adec57b4926db881f170b0f89

SHA256 ddc5cd7b540c88f00bd8d685e4d4fce54b6223757d66599d02c22c718fa17ccd
MD5 4a6af68adec57b4926db881f170b0f89
SHA1 01970b9e2b23a4498cba226b8525428589677de6
SHA512 13ed2cd58376c9f1ac5a575c87db348bf674eb821e18aef50042c8ea28314dff0ed7afbe0c90ec37790643d79b929f503466ab30f434c0fdcfe2cd5ea2189078
SSDEEP 24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHO:SCqm2Jpr0nNM7Dus7Nx2u
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

344192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths