1f10ee0f4e6d72c345fc34ab20d93f4271ede07d01e98e9edef172309f8fe598

General

Target
1f10ee0f4e6d72c345fc34ab20d93f4271ede07d01e98e9edef172309f8fe598
Size 8.2MB
Sample260720-lk997sfz5x
SHA256 1f10ee0f4e6d72c345fc34ab20d93f4271ede07d01e98e9edef172309f8fe598
MD5 52b4adf536c7bb1c63b9c1be41bbc313
SHA1 3c93ed23b12ce085300a6890bacbaef79638920a
SHA512 08643111db0499f56604eef34e78b139e69106403222b08bd04ea1b35e1c44ba032de26044f8e3ee67d6eef597c1d3905122390346d55f08567e1a909da8ece0
SSDEEP 196608:WSX3dDuAbqxyVUiUg791rCGRZi5jVWJTIMc32bu7:Lpr2xiUS7PvRZAjVKO2G
TLSH
T18E863352C23D6E73ECA56BE213142C87183BD70C4C1E821E98D5D3575B943F2FADA98A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/wx_video_download.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/wx_video_download.exe

File Explorer

1f10ee0f4e6d72c345fc34ab20d93f4271ede07d01e98e9edef172309f8fe598

.zip 8.2MB
LICENSE

1KB
config.yaml

1KB
wx_video_download.exe

.exe 8.2MB

1f10ee0f4e6d72c345fc34ab20d93f4271ede07d01e98e9edef172309f8fe598

SHA256 1f10ee0f4e6d72c345fc34ab20d93f4271ede07d01e98e9edef172309f8fe598
MD5 52b4adf536c7bb1c63b9c1be41bbc313
SHA1 3c93ed23b12ce085300a6890bacbaef79638920a
SHA512 08643111db0499f56604eef34e78b139e69106403222b08bd04ea1b35e1c44ba032de26044f8e3ee67d6eef597c1d3905122390346d55f08567e1a909da8ece0
SSDEEP 196608:WSX3dDuAbqxyVUiUg791rCGRZi5jVWJTIMc32bu7:Lpr2xiUS7PvRZAjVKO2G
TLSH
T18E863352C23D6E73ECA56BE213142C87183BD70C4C1E821E98D5D3575B943F2FADA98A
MD5 SHA1 SHA512 SSDEEP TLSH

wx_video_download.exe

SHA256 4519135c597f41d15771cf672849dce08a2eb56e97eddada3e8ab3316b962d82
MD5 92568042f3150bd8e2dd90a248125aaa
SHA1 f018c819b426974fb2a43a54d89572ba63c459c5
SHA512 ed53c1d2ca5451a2eea3b43aacb6a1315fe50e1ceefd6ede60b648aef13bbba1bb0949c60130536311422ef4fbee22881aeee9a9be35f6bea54383a6d350c36f
SSDEEP 196608:SWfJNP+A/g3kHaqWeVPvTcC/3OzndkHjIewhUT+:VFbY30aiVDR/3mndoQU
TLSH
T160863352C23D6E72ECE67BF203142C87183BD71C4C1E821E98D596571F943B2EADA5CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

33010576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

1f10ee0f4e6d72c345fc34ab20d93f4271ede07d01e98e9edef172309f8fe598

LICENSE

config.yaml

wx_video_download.exe

generic