FIX[.]exe | Triage™

General

Target
FIX.exe
Size 3.4MB
Sample260606-n246mac13x
SHA256 24e4edf1c4fce9ad3907447c49241465c0d4424c19716af1ad288d33e55d6726
MD5 e76712cff2e7c66d74094b4dbbe905a0
SHA1 ae6d6633ec9880dbf09978f0cd78da4896630893
SHA512 8a9db2d04dc4dc0d053a17ad7665eca7c4a2b357af1c773e3b4d7a42c829b9f3fed09f62389d4499f49472b720db781287b00bce4f7ecc48216980e56ac62814
SSDEEP 98304:RMvGMj2EJK5DcqPcJp428vJgjJHNlKjbBC:6h2E059kPB8v6HNSbQ
TLSH
T109F533463852A12ACDD8F37AD2CEAB6F70D352926BDD98CEB449C50A5EE4FC3462D140
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FIX.exe

SHA256 24e4edf1c4fce9ad3907447c49241465c0d4424c19716af1ad288d33e55d6726
MD5 e76712cff2e7c66d74094b4dbbe905a0
SHA1 ae6d6633ec9880dbf09978f0cd78da4896630893
SHA512 8a9db2d04dc4dc0d053a17ad7665eca7c4a2b357af1c773e3b4d7a42c829b9f3fed09f62389d4499f49472b720db781287b00bce4f7ecc48216980e56ac62814
SSDEEP 98304:RMvGMj2EJK5DcqPcJp428vJgjJHNlKjbBC:6h2E059kPB8v6HNSbQ
TLSH
T109F533463852A12ACDD8F37AD2CEAB6F70D352926BDD98CEB449C50A5EE4FC3462D140
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12929088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths