SecuriteInfo[.]com[.]FileRepMalware[.]24084[.]17571[.]exe

General

Target
SecuriteInfo.com.FileRepMalware.24084.17571.exe
Size 672KB
Sample250330-tmp12sstaz
SHA256 c7ee4281e2017e08f5e2b3c7a4e82a872f0b5eed1ce6f522b14aa9f8e1112155
MD5 307b2ab3ca094b94f1a34ef375c8fc30
SHA1 e041ecf2b3466ace266a89ac71155806a42156ae
SHA512 3b9c18e9e2fc461fc4c92b15f2a1c702c41f4a921cb1c31a71aaab1c54eae5c0b88a9aad6bec0a84e20305d58dba8a21894bdf2289ac864d43d8444d32cffd09
SSDEEP 12288:eoh13dewAkpToxgPjMUS9SJl0mYnagLvMdsK2xd6TD366qCs/4AJ5BoIM5QDB7bV:eo/3RI84xHmYamzKF366qCs/4uBeg
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.FileRepMalware.24084.17571.exe

SHA256 c7ee4281e2017e08f5e2b3c7a4e82a872f0b5eed1ce6f522b14aa9f8e1112155
MD5 307b2ab3ca094b94f1a34ef375c8fc30
SHA1 e041ecf2b3466ace266a89ac71155806a42156ae
SHA512 3b9c18e9e2fc461fc4c92b15f2a1c702c41f4a921cb1c31a71aaab1c54eae5c0b88a9aad6bec0a84e20305d58dba8a21894bdf2289ac864d43d8444d32cffd09
SSDEEP 12288:eoh13dewAkpToxgPjMUS9SJl0mYnagLvMdsK2xd6TD366qCs/4AJ5BoIM5QDB7bV:eo/3RI84xHmYamzKF366qCs/4uBeg
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

751072

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths