437-07[.]zip | Triage

General

Target

437-07.zip
Size

16.2MB
MD5

f2af439faf23ca1acf5c5a3b5ca239f7
SHA1

a5c805cae1191b2e929564e5892da74f883e389d
SHA256

d5834daaa29d996e7040776e4f1d69540028ba539857fb499d9e7bf21d58d412
SHA512

3938515a1d0edfe995f7196ace99aa3f61b581984f786686962e73893d745c1cbaf5a5af6853ebfb24bc0186872abfdd95731d2d221daa6c1a84af5383f7f526
SSDEEP

393216:8wYBxOuWSjkpdN9Ng5k1cqvzCA3rACPW69hLSctxhcs13qEkW:hAx+/fCquWPWOLRXhcW3qo

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/437_07/minecraft (4).exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/437_07/minecraft (4).exe
unpack002/out.upx

Files

437-07.zip
.zip
437_07/minecraft (4).exe
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 576KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16.3MB - Virtual size: 16.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16.6MB - Virtual size: 16.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 576KB

UPX1 Size: 16.3MB - Virtual size: 16.3MB

.rsrc Size: 172KB - Virtual size: 176KB

Headers

File Characteristics

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 16.6MB - Virtual size: 16.6MB

.rdata Size: 3KB - Virtual size: 3KB

.pdata Size: 1024B - Virtual size: 564B

.xdata Size: 512B - Virtual size: 504B

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 104B

.rsrc Size: 172KB - Virtual size: 171KB

UPX0
Size: - Virtual size: 576KB

UPX1
Size: 16.3MB - Virtual size: 16.3MB

.rsrc
Size: 172KB - Virtual size: 176KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 16.6MB - Virtual size: 16.6MB

.rdata
Size: 3KB - Virtual size: 3KB

.pdata
Size: 1024B - Virtual size: 564B

.xdata
Size: 512B - Virtual size: 504B

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 104B

.rsrc
Size: 172KB - Virtual size: 171KB