bazzarnuker[.]exe | Triage™

General

Target
bazzarnuker.exe
Size 181KB
Sample260628-agsefaes6s
SHA256 522880d3cbb40e131cf54033fc0693ec96b3440bfabc68c1062817f56e2d9302
MD5 f47a442854b99bc98936122fae29dcf9
SHA1 910c3e94fb25e5d984606a811a983bd3a0d0437a
SHA512 16caffc8be89c3c55b4fd3d7e78cb72aa1f71fd54f7d38d87ca6b1370d4b30ad1c84e22b5edc1cd4350d8d4970eac1ce3222bd2f7ec57b73b483cc02cc49e926
SSDEEP 3072:JiCai+LPzzsPOaLuGqjY5wFmEeVtrZEwPCJG5J7MuQkp5WcSItnJi:kgqn+OaLNGZIhVtmwPcgvQq5WcS+nJi
TLSH
T1F70412EFD5AEC2BCCD17A03789F36E302FB4712261550657A03888AD99FA206EC74E51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bazzarnuker.exe

SHA256 522880d3cbb40e131cf54033fc0693ec96b3440bfabc68c1062817f56e2d9302
MD5 f47a442854b99bc98936122fae29dcf9
SHA1 910c3e94fb25e5d984606a811a983bd3a0d0437a
SHA512 16caffc8be89c3c55b4fd3d7e78cb72aa1f71fd54f7d38d87ca6b1370d4b30ad1c84e22b5edc1cd4350d8d4970eac1ce3222bd2f7ec57b73b483cc02cc49e926
SSDEEP 3072:JiCai+LPzzsPOaLuGqjY5wFmEeVtrZEwPCJG5J7MuQkp5WcSItnJi:kgqn+OaLNGZIhVtmwPcgvQq5WcS+nJi
TLSH
T1F70412EFD5AEC2BCCD17A03789F36E302FB4712261550657A03888AD99FA206EC74E51
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

511472

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths