General

  • Target
    a35f8e9f2fd09bb07fb30f15a380907f597ae38ae5c8f2f8fbc4d334ad0ffe9a.exe
  • Size 1.6MB
  • Sample240519-b74e3acc64
  • SHA256 a35f8e9f2fd09bb07fb30f15a380907f597ae38ae5c8f2f8fbc4d334ad0ffe9a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
upx

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • a35f8e9f2fd09bb07fb30f15a380907f597ae38ae5c8f2f8fbc4d334ad0ffe9a.exe
    .exe 1.6MB
  • out.upx
    .exe 4.4MB

a35f8e9f2fd09bb07fb30f15a380907f597ae38ae5c8f2f8fbc4d334ad0ffe9a.exe

  • SHA256 a35f8e9f2fd09bb07fb30f15a380907f597ae38ae5c8f2f8fbc4d334ad0ffe9a
  • MD5 SHA1 SHA512 SSDEEP
  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

PE Signature issue

Digest
76:a0:21:e1:27:f8:02:1c:c1:16:9f:ed:99:f3:8c:17:b6:a2:9a:8b:0b:87:79:99:80:34:8f:0c:66:fc:e0:be
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

PE Signature issue

Digest
4f:cf:d1:6a:ff:58:e0:f4:67:8b:a5:cf:2d:f9:55:97:7c:3c:dd:a2
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN
Chains

Apr 23, 2020

Minor OS version
1
Major OS version
6
Entry point
4944000
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths