bazzarnuker[.]exe | Triage™

General

Target
bazzarnuker.exe
Size 196KB
Sample260628-am41esew2y
SHA256 58a65375edfbb047e81891c7efdb9b31f99a23fabea03950980b1aef0faecc71
MD5 fc1a2c58fddad677ed898ee6a59f6517
SHA1 f99f71a6bee3017593af229232b44d3f053f2e40
SHA512 a396e152fdc726d985f085e4a764a7209e49a4419fc2bd761a6b1e23ef4808d08fd9bb20838a1f03af46ba31dd6f6207c47c1bd71e4e881ab40ca29764e376ee
SSDEEP 3072:lD0u7Wwh//avh81WNhwuC3YdDnOfsG98/YwMewvB4xSPoJxCtSyW3SYp4m9YSZAz:lLivhaT2408VwMeEBhQJvp4m9nZmlt
TLSH
T1641423F2420793BDE9BBF0F20566B5BCA56060B7D75D6D6C9C7867A718CEA221E10220
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bazzarnuker.exe

SHA256 58a65375edfbb047e81891c7efdb9b31f99a23fabea03950980b1aef0faecc71
MD5 fc1a2c58fddad677ed898ee6a59f6517
SHA1 f99f71a6bee3017593af229232b44d3f053f2e40
SHA512 a396e152fdc726d985f085e4a764a7209e49a4419fc2bd761a6b1e23ef4808d08fd9bb20838a1f03af46ba31dd6f6207c47c1bd71e4e881ab40ca29764e376ee
SSDEEP 3072:lD0u7Wwh//avh81WNhwuC3YdDnOfsG98/YwMewvB4xSPoJxCtSyW3SYp4m9YSZAz:lLivhaT2408VwMeEBhQJvp4m9nZmlt
TLSH
T1641423F2420793BDE9BBF0F20566B5BCA56060B7D75D6D6C9C7867A718CEA221E10220
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

551536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths