839f4bc2474268279f0f6c1a17ffbe2b[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

839f4bc2474268279f0f6c1a17ffbe2b.bin
Size

3.9MB
MD5

8ce8ae1611b2a2ce09203c3232db4468
SHA1

49c8a83640d579214a4e5c9396d76a2ec33a316c
SHA256

98c209e5b5a64fc4b499f0c24ef213fce955a558b51d172fa5322c15db0ddaf8
SHA512

4e6ae17f2f7be7cb84c3867c47e61fd307190d837e49b6062e2669fd8c4842c01503f0bfcd5c0cb985e8159bb988188807673265275664b37044cd2352efd02f
SSDEEP

98304:m6sCYqYH8EotaXZSC0yKTscv5fMZ1Y7YOtxch:ccEojVyKT32Z1Y7YRh

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/6e9fcfd94b394637080f11b5a39b52b9270e2da52209169c309dde4c701059dd.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6e9fcfd94b394637080f11b5a39b52b9270e2da52209169c309dde4c701059dd.exe

Files

839f4bc2474268279f0f6c1a17ffbe2b.bin
.zip

Password: infected
6e9fcfd94b394637080f11b5a39b52b9270e2da52209169c309dde4c701059dd.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE