DirectX9[.]exe | Triage™

General

Target
DirectX9.exe
Size 3.4MB
Sample260728-phlevawdjd
SHA256 5a33bc95772df3bde58e86d47b140ca012983d8c50e1f908682a66020db3b740
MD5 296ab1a80c6b18eb0bd3642741e7ba99
SHA1 00ae186240d3598b7718daec21beebcb3ef8b03d
SHA512 ba08ff3faef2ee9839476c242bafe92c85a41aba617b9c702937b44a11ede31d8257e6e8663ebfaafbbd4bf72f49503f99a22a0a74e53e8e42f9c498009b8aa0
SSDEEP 98304:Tm55zPGezi5fxrIhacs3wqIWQwT83DZN:Tm5tPGccshacs3plQwIT
TLSH
T131F5338510A5E24FE63C01BEA7F4E0643CDBD992C763AF17539313610BE826A525AFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DirectX9.exe

SHA256 5a33bc95772df3bde58e86d47b140ca012983d8c50e1f908682a66020db3b740
MD5 296ab1a80c6b18eb0bd3642741e7ba99
SHA1 00ae186240d3598b7718daec21beebcb3ef8b03d
SHA512 ba08ff3faef2ee9839476c242bafe92c85a41aba617b9c702937b44a11ede31d8257e6e8663ebfaafbbd4bf72f49503f99a22a0a74e53e8e42f9c498009b8aa0
SSDEEP 98304:Tm55zPGezi5fxrIhacs3wqIWQwT83DZN:Tm5tPGccshacs3plQwIT
TLSH
T131F5338510A5E24FE63C01BEA7F4E0643CDBD992C763AF17539313610BE826A525AFDC
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

12918832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths