plankapkan[.]exe | Triage™

General

Target
plankapkan.exe
Size 3.1MB
Sample251207-vbqc4sskfq
SHA256 8072d0b2fb46d96201e11857d8228c328d7ac3e6d8e4ce7d09fdaedb747ac2a5
MD5 c6303e71a65f42c26067269fa26b8580
SHA1 3907b5dd4426b0cd9eee61fa3ce66f55c70a60f8
SHA512 e7054cdbdc88959f5fb5502530c23e38282116f174de7d099e60325eba7355448c493baa2d591bad73fb45fdfcfdd380f8bc858797ef20b7834184a3ee8242dd
SSDEEP 98304:wvk+EMCSSuKrxhFd+FAawBzYwfJRoGIwN7nn:wPEMCV1rUQ9xRopwN7n
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
plankapkan.exe

SHA256 8072d0b2fb46d96201e11857d8228c328d7ac3e6d8e4ce7d09fdaedb747ac2a5
MD5 c6303e71a65f42c26067269fa26b8580
SHA1 3907b5dd4426b0cd9eee61fa3ce66f55c70a60f8
SHA512 e7054cdbdc88959f5fb5502530c23e38282116f174de7d099e60325eba7355448c493baa2d591bad73fb45fdfcfdd380f8bc858797ef20b7834184a3ee8242dd
SSDEEP 98304:wvk+EMCSSuKrxhFd+FAawBzYwfJRoGIwN7nn:wPEMCV1rUQ9xRopwN7n
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12092352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths