ap-file-information+combustibles+traités+lh[.]xls[.]exe--1053167891[.]zip

General

Target

ap-file-information+combustibles+traités+lh.xls.exe--1053167891.zip
Size

58KB
MD5

8cf15490bbbd8294982c8b6eb84bf36a
SHA1

69357673d57e015e975cbd72280e2a5be0561a4a
SHA256

5338b323b46d51cf1733a19f1c0ed5386b513944627f3d858a815ef41b0b6b05
SHA512

2a3e2deb3e1b7cbf2aae2f10e1e62afa48cb576decdd8b6a7ab6b0a91c0614508c9a016f7f1e49cab7ab0f158d950ed26b41de3e2eb85861e3e0bd166b251562
SSDEEP

1536:lVirkWqY94itilPY6CiChJOzuvA1Kc/zZs5CV2uFu/8O:2A5YWCilA6CiYONfrZe498

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/information combustibles traits lh.xls.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/information combustibles traits lh.xls.exe

ap-file-information+combustibles+traités+lh.xls.exe--1053167891.zip
.zip

Password: cautionhandlewithcare
information combustibles traits lh.xls.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
information combustibles traits lh.xls.exe.METADATA