5ae46fe7637a5ccd3ff087b4c28d4660N[.]exe

General

Target
5ae46fe7637a5ccd3ff087b4c28d4660N.exe
Size 83KB
Sample240715-b3w57ascmp
SHA256 5ff0e61866617e013e407e58967821ebb6933d19dfc6c88c450a453e4d94db59
MD5 5ae46fe7637a5ccd3ff087b4c28d4660
SHA1 75fc411e665d23d3dbcbcd06144781ab7a08d245
SHA512 18f76362ccefa966fb46b91d5f998941fdf18a263f37f8d84285bd02b13013ffadf9f66d0d618834b327b0dd47fc8f57e6509209539b6fbad54cbe517720063b
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK:LJ0TAz6Mte4A+aaZx8EnCGVuC
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
5ae46fe7637a5ccd3ff087b4c28d4660N.exe
unpack001/out.upx

File Explorer

5ae46fe7637a5ccd3ff087b4c28d4660N.exe

.exe 83KB
out.upx

.exe 135KB

5ae46fe7637a5ccd3ff087b4c28d4660N.exe

SHA256 5ff0e61866617e013e407e58967821ebb6933d19dfc6c88c450a453e4d94db59
MD5 5ae46fe7637a5ccd3ff087b4c28d4660
SHA1 75fc411e665d23d3dbcbcd06144781ab7a08d245
SHA512 18f76362ccefa966fb46b91d5f998941fdf18a263f37f8d84285bd02b13013ffadf9f66d0d618834b327b0dd47fc8f57e6509209539b6fbad54cbe517720063b
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK:LJ0TAz6Mte4A+aaZx8EnCGVuC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

165392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 a608c1ca70d7cea2c7bee8099788e5772215420eacc557c73683dc05cd5e55eb
MD5 d307d60d6f54d1a1714bba90d25c957b
SHA1 67e5dfbfcb57456a7b7bfb2c26c85643e5125b4f
SHA512 ec62de19d64f5c837f5e5af78b65a4322fc54c9157ed25203943b6af83e435c87f2fc9ea9b23251c77fc06761436f732bff7892f659405efef2b197f1f8e9e8f
SSDEEP 3072:Xs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/7/Fnncr:XDeM7iNEkgiOb31k1ECbJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

5ae46fe7637a5ccd3ff087b4c28d4660N.exe

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

5ae46fe7637a5ccd3ff087b4c28d4660N.exe

generic

out.upx

generic