file[.]exe | Triage™

General

Target
file.exe
Size 3.1MB
Sample251213-2xft5atncx
SHA256 0b7ebbb6e65892ff7434ef2cca5f60a8d0df8a8d0250ebd2dcde0d5af596f954
MD5 b0e6853cb1094abbaffda31e9924e406
SHA1 d2b822bcddaf8e7349a7f9e8b14854c65f03ee8c
SHA512 aef6c88545d4c68c803a27409641a0f438062e9fdaf225e2c45d38760e8cb7a7da213389ddb38ef44e50195e859b8f2bfb9a6d90fa1632f39d5268b6265aa267
SSDEEP 49152:7mggV4hU6MD3osQYk8Q/PHahNq/+BEX3md0kcP/A0MQTibvABArSMnPC2dzZ0:7XgyS6MMmkj/f5+aGcGL0yP1z+
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

SHA256 0b7ebbb6e65892ff7434ef2cca5f60a8d0df8a8d0250ebd2dcde0d5af596f954
MD5 b0e6853cb1094abbaffda31e9924e406
SHA1 d2b822bcddaf8e7349a7f9e8b14854c65f03ee8c
SHA512 aef6c88545d4c68c803a27409641a0f438062e9fdaf225e2c45d38760e8cb7a7da213389ddb38ef44e50195e859b8f2bfb9a6d90fa1632f39d5268b6265aa267
SSDEEP 49152:7mggV4hU6MD3osQYk8Q/PHahNq/+BEX3md0kcP/A0MQTibvABArSMnPC2dzZ0:7XgyS6MMmkj/f5+aGcGL0yP1z+
MD5 SHA1 SHA512 SSDEEP

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12087568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths