RingHeads32[.]exe | Triage™

General

Target
RingHeads32.exe
Size 923KB
Sample240610-s1dpha1fra
SHA256 da6422cd3f07ce7379c0304640e20d4d0be8d3f7c4cb3f4c715b9e162c51dbe4
MD5 588737b0ad63cd1c3b367b6769f8f3d2
SHA1 4f13cd9d31b619f95afa05325d61be54a7b0ba24
SHA512 e6e0050e272378059845cc51199df2493245f0ebbc7ab5a2ccc1deea02cb37865b7003a1f903d6452ed1d1029c0a27bfd7cd8667d6565a563e08e869b7855f90
SSDEEP 12288:eyXDNXQoPpYxmppnkuYDhpYwOccrgB3VNn4WcW73VG7Cjv/56VHB1EZZY45R9OZT:p5Dm8nCb9OrriY/y3Vxv/5i70Z/lMj
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RingHeads32.exe

SHA256 da6422cd3f07ce7379c0304640e20d4d0be8d3f7c4cb3f4c715b9e162c51dbe4
MD5 588737b0ad63cd1c3b367b6769f8f3d2
SHA1 4f13cd9d31b619f95afa05325d61be54a7b0ba24
SHA512 e6e0050e272378059845cc51199df2493245f0ebbc7ab5a2ccc1deea02cb37865b7003a1f903d6452ed1d1029c0a27bfd7cd8667d6565a563e08e869b7855f90
SSDEEP 12288:eyXDNXQoPpYxmppnkuYDhpYwOccrgB3VNn4WcW73VG7Cjv/56VHB1EZZY45R9OZT:p5Dm8nCb9OrriY/y3Vxv/5i70Z/lMj
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1010256

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths