8f49e0ea6357b8803c20e9d1b852eab0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8f49e0ea6357b8803c20e9d1b852eab0N.exe
Size

451KB
MD5

8f49e0ea6357b8803c20e9d1b852eab0
SHA1

ad2cfddf19aedbc1cdeb3073e598dda217a3f14c
SHA256

ded4cdea049c378b0bccea309e96de305afebea8501456f81e75733a1e95440b
SHA512

6f4294295d9bcf7703c2e0dbba3bffcb3e5933819d119e5c135b998c8fbf94bea192d7a2b57ecdaec3fd121b044d8cd046fcf1292e626277d6bcc22112298d25
SSDEEP

768:/pQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmRjmJ0:BeT7BVwxfvLFwjRRP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

8f49e0ea6357b8803c20e9d1b852eab0N.exe
.exe windows:4 windows x86 arch:x86

Code Sign

45:11:c2:7e:e0:10:99:83:4f:ce:3b:c0:f9:c0:5a:a1
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

26/07/2022, 03:28

Not After

25/07/2023, 00:00

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

70:d6:51:7e:6c:ef:e6:b4:41:53:c2:1a:1c:ad:49:a5
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

26/07/2022, 03:28

Not After

26/07/2037, 00:10

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:9b:c3:d6:f0:69:54:8b:7b:68:60:c7:b2:c5:e9:65:51:e7:cc:33
Signer

Actual PE Digest

a5:9b:c3:d6:f0:69:54:8b:7b:68:60:c7:b2:c5:e9:65:51:e7:cc:33

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pb
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

45:11:c2:7e:e0:10:99:83:4f:ce:3b:c0:f9:c0:5a:a1Certificate

Extended Key Usages

70:d6:51:7e:6c:ef:e6:b4:41:53:c2:1a:1c:ad:49:a5Certificate

Key Usages

a5:9b:c3:d6:f0:69:54:8b:7b:68:60:c7:b2:c5:e9:65:51:e7:cc:33Signer

Headers

File Characteristics

Sections

UPX0 Size: 64KB - Virtual size: 64KB

UPX1 Size: 16KB - Virtual size: 16KB

.rsrc Size: 24KB - Virtual size: 24KB

.pb Size: 1024B - Virtual size: 4KB

45:11:c2:7e:e0:10:99:83:4f:ce:3b:c0:f9:c0:5a:a1
Certificate

70:d6:51:7e:6c:ef:e6:b4:41:53:c2:1a:1c:ad:49:a5
Certificate

a5:9b:c3:d6:f0:69:54:8b:7b:68:60:c7:b2:c5:e9:65:51:e7:cc:33
Signer

UPX0
Size: 64KB - Virtual size: 64KB

UPX1
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 24KB - Virtual size: 24KB

.pb
Size: 1024B - Virtual size: 4KB