2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9

Resubmissions

18/04/2024, 11:08

240418-m8wmdsbc2710

18/04/2024, 11:08

18/04/2024, 11:08

18/04/2024, 11:08

18/04/2024, 11:08

18/04/2024, 09:41

Sharing

Copy URL Twitter E-mail

General

Target
2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9
Size 209KB
Sample240418-m8lgesce31
SHA256 2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9
MD5 8e9ddb099e71555326413d9a3a930584
SHA1 96350dae3f42d37341b3da7410aabe5c42384156
SHA512 8d34f32ee48e3d399e020ba3ab4eeab9f1fbdb55a4a5b61b120280975990058221c75be001d09b4f804400977bb769e9ba1fdbd68e90f7db97bd78a69001f09c
SSDEEP 6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1Ux:cnLh9yn52rpUR5vHuRYpM+x
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9
unpack001/out.upx

File Explorer

2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9

.exe 209KB
out.upx

.exe 1.0MB

2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9

SHA256 2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9
MD5 8e9ddb099e71555326413d9a3a930584
SHA1 96350dae3f42d37341b3da7410aabe5c42384156
SHA512 8d34f32ee48e3d399e020ba3ab4eeab9f1fbdb55a4a5b61b120280975990058221c75be001d09b4f804400977bb769e9ba1fdbd68e90f7db97bd78a69001f09c
SSDEEP 6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1Ux:cnLh9yn52rpUR5vHuRYpM+x
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69106992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 f55cb3610af39d030231dc72beb53bdfa9f6fe26ff62c72e9af92059ad4b947e
MD5 86b56f37e12c0361800c2dc4a00efaad
SHA1 5a4521d1334b352cfb0abc9ea4c16dba3a683139
SHA512 e67b7cc98a0fdbcbfa6fc1ece56f8ed25f8bb920e76d1f6bd1e997823220b19ada56a6a99e2e0b60c3ea43053ad4bec9f11b59a8c1cfebae7470a5eff8850a7d
SSDEEP 6144:D9mI/A/bpCQqR5yqL5gbqD8T/ruTEu1U7C711:D9ro/4QqLmqDC/rup+6P
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21087

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE

PDB paths

2ff18fb4a4d05b7d419a88167d7001bb000eac2f4861bf3849a713b6b701f4c9

generic

out.upx

generic