overlord-setup[.]exe

General

Target
overlord-setup.exe
Size 4.1MB
Sample260719-3sshssgx8p
SHA256 416ddba66463daaf40101de6c9f6ee030f7895d544348c33ea315f48d69b9f82
MD5 cb3781c9226d3cf6156ee531d15a203c
SHA1 2abdb00e4f154d8b011b678abaecf87fb0a43dc7
SHA512 c8925f9572af94036e64b332f96e58f346a02c4ad7598cc9aa06f0665f2c36a537290da3eb5a40ff5c419f90610bcce16f7ddf94d8f660f79f4a30aa12dfc86b
SSDEEP 98304:AaXp2OPCo8OZHBuC/dkf0o4V3IQnGeUtH15EobDU8HJ:AypdPCyBNmMoS3IG3xoPU
TLSH
T1B416332A0699BF90EDB92BB8FFB604FDDE343A36C3DD071122BDD3A45542A88D54481D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
overlord-setup.exe

SHA256 416ddba66463daaf40101de6c9f6ee030f7895d544348c33ea315f48d69b9f82
MD5 cb3781c9226d3cf6156ee531d15a203c
SHA1 2abdb00e4f154d8b011b678abaecf87fb0a43dc7
SHA512 c8925f9572af94036e64b332f96e58f346a02c4ad7598cc9aa06f0665f2c36a537290da3eb5a40ff5c419f90610bcce16f7ddf94d8f660f79f4a30aa12dfc86b
SSDEEP 98304:AaXp2OPCo8OZHBuC/dkf0o4V3IQnGeUtH15EobDU8HJ:AypdPCyBNmMoS3IG3xoPU
TLSH
T1B416332A0699BF90EDB92BB8FFB604FDDE343A36C3DD071122BDD3A45542A88D54481D
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6492096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths