bazzarnuker[.]exe | Triage™

General

Target
bazzarnuker.exe
Size 190KB
Sample260628-assvcaew6r
SHA256 4055c24e3222e34df3d28a0b76a2f11478cc7b51b2d000be8c06c2f81c76079d
MD5 84957325736227c4d121d78db2f8d05e
SHA1 f7fcc08907eb5b64984cc09111caed6c391d1154
SHA512 b83446ea1062b1111cd050567e5ee620a5da41a28ef9ccf238ab571675872d7a5803e48004519213f081745f99acc32486bb70324881edb80e1a72d6b6f0726d
SSDEEP 3072:kt2vxLfn/7x3LNIIShY9dnkScrvAuJ4PnHY0+e1OfkVAsjfHgBwbU4odhB1B9t+/:fvxLf136IAwkScr4+4fHnAke6fgBQM1Q
TLSH
T122141241B3ADEE0CC1E66EFF0C6F7078EA91394B744652C19C411EB6A05580BE667AF8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bazzarnuker.exe

SHA256 4055c24e3222e34df3d28a0b76a2f11478cc7b51b2d000be8c06c2f81c76079d
MD5 84957325736227c4d121d78db2f8d05e
SHA1 f7fcc08907eb5b64984cc09111caed6c391d1154
SHA512 b83446ea1062b1111cd050567e5ee620a5da41a28ef9ccf238ab571675872d7a5803e48004519213f081745f99acc32486bb70324881edb80e1a72d6b6f0726d
SSDEEP 3072:kt2vxLfn/7x3LNIIShY9dnkScrvAuJ4PnHY0+e1OfkVAsjfHgBwbU4odhB1B9t+/:fvxLf136IAwkScr4+4fHnAke6fgBQM1Q
TLSH
T122141241B3ADEE0CC1E66EFF0C6F7078EA91394B744652C19C411EB6A05580BE667AF8
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

537408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths