451e97411dbd1839761cec7c78057d3d[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

451e97411dbd1839761cec7c78057d3d.zip
Size

63KB
MD5

27ce30f64c7ab9aaa9137e848b9dd1d1
SHA1

d6259befd7f3124076612b24714f359f9edde86c
SHA256

6023132273e921c0409a3495dfa9ad9d7e944eb9042e690e870e459047596e0a
SHA512

c2b8e1d778c46bc70cce7c7a75c9520a27836c8bbbfc6e3c07b71068dc31bbe52cda732325c16c87e50af4586f51512e224b77fcf3f76357ff4d8153a753c239
SSDEEP

1536:J0fVbwPIQ8wAAUpCdPFL5fc4gNvT3TFnFnO7P:29L5WP0NvrTdFnO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/bce63c468f29a66bef4148948a1594f5b3dfff12b2b6b647cfc0b432ca880237	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bce63c468f29a66bef4148948a1594f5b3dfff12b2b6b647cfc0b432ca880237

Files

451e97411dbd1839761cec7c78057d3d.zip
.zip

Password: infected
bce63c468f29a66bef4148948a1594f5b3dfff12b2b6b647cfc0b432ca880237
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE