Win64[.]exe | Triage™

General

Target
Win64.exe
Size 3.4MB
Sample260727-aprg4sttex
SHA256 09fead34d9a7f79dd16f54beba2d201fb55da5b6f8bb77d29011e937530a201e
MD5 032b0d1866ccc6ed84cdbf93dc68ef78
SHA1 4e681c52c304ac68ecb8be4564f11a7d62fd8406
SHA512 4ee80e3cd48050ec11b3906262988b00e8e396adce5ddf2cf574579ce93d5856c7fde83f7f69fb77aa06b520674df8a5c017b1d900c6820d0150ea151785a418
SSDEEP 49152:217kD8xTOYjo28+/UkCv0Wi57XwqOKUR56yxtA7ttZmKTR5kTXqUgKWDqnb3jkrQ:ulTtjBNMkhWiRSEtIW2WGnb3jAnZUv
TLSH
T139F533DE37183789C1C0F638DE489965D1BA1D3DF2CABA912BA5E1AE83F20035D45DA4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Win64.exe

SHA256 09fead34d9a7f79dd16f54beba2d201fb55da5b6f8bb77d29011e937530a201e
MD5 032b0d1866ccc6ed84cdbf93dc68ef78
SHA1 4e681c52c304ac68ecb8be4564f11a7d62fd8406
SHA512 4ee80e3cd48050ec11b3906262988b00e8e396adce5ddf2cf574579ce93d5856c7fde83f7f69fb77aa06b520674df8a5c017b1d900c6820d0150ea151785a418
SSDEEP 49152:217kD8xTOYjo28+/UkCv0Wi57XwqOKUR56yxtA7ttZmKTR5kTXqUgKWDqnb3jkrQ:ulTtjBNMkhWiRSEtIW2WGnb3jAnZUv
TLSH
T139F533DE37183789C1C0F638DE489965D1BA1D3DF2CABA912BA5E1AE83F20035D45DA4
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12922432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths